Static task
static1
Behavioral task
behavioral1
Sample
73a4f40d0affe5eea89174f8917bba73.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
73a4f40d0affe5eea89174f8917bba73.exe
Resource
win10v2004-20240802-en
General
-
Target
b08e045217a374f32b7b6de7866d1171_JaffaCakes118
-
Size
912KB
-
MD5
b08e045217a374f32b7b6de7866d1171
-
SHA1
fe42e68d9a98c8019f13c74e73200c1a61996140
-
SHA256
9e31830230743fbd8374a2894cbbd4f10d2d91a4d08dde374d79aad92ceb247b
-
SHA512
8d74115fc6b23744f72090b2ea3830a02aebce00cdc155ba6587ad2d30a4bce1390637aef925b8d348ba2cb0cb03d07251d4ed921d1c38e109c6c0fbaacdee51
-
SSDEEP
24576:2oJZiJX4zzYYj4vj+2wcIzOaJrXbKymhetfnZDvno:zEeYA4vj5yX9uyWIw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/73a4f40d0affe5eea89174f8917bba73.exe
Files
-
b08e045217a374f32b7b6de7866d1171_JaffaCakes118.tar
-
73a4f40d0affe5eea89174f8917bba73.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 908KB - Virtual size: 907KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ