Behavioral task
behavioral1
Sample
93fa9615b5b68cb4d4c85391fd1f3565_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
93fa9615b5b68cb4d4c85391fd1f3565_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
93fa9615b5b68cb4d4c85391fd1f3565_JaffaCakes118
-
Size
74KB
-
MD5
93fa9615b5b68cb4d4c85391fd1f3565
-
SHA1
c8219c359f1f39fdb02e35280999176cce48f2d4
-
SHA256
37537b375b09bd2759267373a10103310975ecffdad8f00885b7be609d30c2b8
-
SHA512
25d3ff154bdf99950accfba0eb49dc5d49b870d7f3108a163d2798c7773c2c2cebf57d939f8b16f8a1d45de95e6ac466b1c4425a66639f0b7fd78a64d8aa9359
-
SSDEEP
1536:AHN5u5fejAeXpmFM0pJAvckOXw72AtY4fAcU:AHNcfpesFM02BY4fS
Malware Config
Extracted
purecrypter
https://store2.gofile.io/download/9552a715-46fc-4187-bb0c-ece3f0c880cd/Lyhkvjpnugcyvdsym.dll
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93fa9615b5b68cb4d4c85391fd1f3565_JaffaCakes118
Files
-
93fa9615b5b68cb4d4c85391fd1f3565_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ