Behavioral task
behavioral1
Sample
9d92eac2b25165ab5f82ca4118ae6a9f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9d92eac2b25165ab5f82ca4118ae6a9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9d92eac2b25165ab5f82ca4118ae6a9f_JaffaCakes118
-
Size
18KB
-
MD5
9d92eac2b25165ab5f82ca4118ae6a9f
-
SHA1
2daf653688ccfee53ee736da06cd259be5f43546
-
SHA256
e9d7e3b14fe2fa512bd8e7d1c9e444cd6293e454677c14d8dceb4958fa24a13e
-
SHA512
caadbbadec26724979cea3240d150bbfba19faca84eff1ad090280c68ef14ffb6c922d2fc916c83266d9bcc5805521e617034f7cb68ea0c585c90ed16b0a8bba
-
SSDEEP
384:grftsXUVII+Zk9JKDQCkEKDVbJEp5KDGPGAblW/Q1W:g6Qt9mPGs
Malware Config
Extracted
purecrypter
https://store2.gofile.io/download/50a4adeb-19a4-4365-b358-92edbd1c702c/Pajoibg.dll
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9d92eac2b25165ab5f82ca4118ae6a9f_JaffaCakes118
Files
-
9d92eac2b25165ab5f82ca4118ae6a9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ