Behavioral task
behavioral1
Sample
b4f08716d55e62ffcb02534ba977a94c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4f08716d55e62ffcb02534ba977a94c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4f08716d55e62ffcb02534ba977a94c_JaffaCakes118
-
Size
23KB
-
MD5
b4f08716d55e62ffcb02534ba977a94c
-
SHA1
7f97a1fdc05ae19bcb6a2d45c81006c575fe9132
-
SHA256
bf7610bec2416bf141156e8d2b89ef52a2a80fa7b065d717dc9d393be4725206
-
SHA512
805a18ff08086d424df4cff2ec4d5c7e91280e9d3d480047e0143a733198bf39332e2260ce2d32d522f144807dada04a67236e0d4b8cc366ca14076dc517772e
-
SSDEEP
384:UQeCo2zmZbQHkJeCdUwBvQ61gjuQBnB9mRvR6JZlbw8hqIusZzZov:75yBVd7RpcnuR
Malware Config
Extracted
njrat
0.7d
HacKed
ldh060719.iptime.org:5552
339d42466a7be49058c52e23a3eaaec5
-
reg_key
339d42466a7be49058c52e23a3eaaec5
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4f08716d55e62ffcb02534ba977a94c_JaffaCakes118
Files
-
b4f08716d55e62ffcb02534ba977a94c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ