Behavioral task
behavioral1
Sample
bdfee192ac09545d738438cbbd961f25_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bdfee192ac09545d738438cbbd961f25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdfee192ac09545d738438cbbd961f25_JaffaCakes118
-
Size
31KB
-
MD5
bdfee192ac09545d738438cbbd961f25
-
SHA1
7e649ae72d7ead9d8c3a2a6ac9741c67685fc45a
-
SHA256
5fc6ab9998a89e18e36a79877d3f64b929489e960a57aa3fd39aa829c40b1c85
-
SHA512
475616b5ad55baf9999f1b9c8987f8dc723aa591fa959b8ec5eeca59b618f3866d00652de8dc3d883ea9e15bf1c934e5e5cba7fc2d539cd55570cbc8d7d9478b
-
SSDEEP
768:y/63v1Qb1pszxH6TkkzwAHlFJFvIFQmIDUu0tiFCj:z2K4FvwQVk9j
Malware Config
Extracted
njrat
0.7d
AvastUI
128.70.98.64:52762
bb1a3344535430e4d76d8fb69c37d82d
-
reg_key
bb1a3344535430e4d76d8fb69c37d82d
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdfee192ac09545d738438cbbd961f25_JaffaCakes118
Files
-
bdfee192ac09545d738438cbbd961f25_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ