Behavioral task
behavioral1
Sample
9bc047adfeff396a16de8ad2a0c961dd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9bc047adfeff396a16de8ad2a0c961dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9bc047adfeff396a16de8ad2a0c961dd_JaffaCakes118
-
Size
67KB
-
MD5
9bc047adfeff396a16de8ad2a0c961dd
-
SHA1
0c556871050029a2ec53326655625767f82d1377
-
SHA256
aed0a4bc8a6c44e4c0ce77a39c34e6595865441031aec0473c09277a90913592
-
SHA512
319686f77a693212a31daddbb0c0dab68a04222a235e6ba7affed719cf3b770e47ddba07565cc24ffbaf6d1261532c0cc28c48c30e95affc6e029b1d60cbe1ca
-
SSDEEP
768:9mmXehf22v5H2Y0cYeFenyJrkcvPhOS4/Vi3xnehErtX+GsMw:EAehvHJ0cYeWQzPhOvVihneW9+V
Malware Config
Extracted
purecrypter
https://store2.gofile.io/download/96d02aa6-bb06-428e-a463-557e1bf9c1e2/Evoodujajdx.dll
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bc047adfeff396a16de8ad2a0c961dd_JaffaCakes118
Files
-
9bc047adfeff396a16de8ad2a0c961dd_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ