Behavioral task
behavioral1
Sample
dc78e3b16885178308ffe38d0e011c53_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc78e3b16885178308ffe38d0e011c53_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc78e3b16885178308ffe38d0e011c53_JaffaCakes118
-
Size
36KB
-
MD5
dc78e3b16885178308ffe38d0e011c53
-
SHA1
f9648e5064f012e61869f067993b395b48c162ae
-
SHA256
0d6fea031ad4c726ccb0b06ef24e649a7ec3a9ca60ab5f8400b3737acea59694
-
SHA512
38001dea96fb22fecf1bce1a164f986ef6d2260e27fce1a571182bd84a1f2b6bffa2db9104d6db318d502f85475b9c4e41015eabe4c7b5f2d715a7049bbe5ddc
-
SSDEEP
768:yY3RlSp2e/1xY3cR4zPJ9waEQNQo6jJzXA:/l5edxQJ9waK7jhA
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc78e3b16885178308ffe38d0e011c53_JaffaCakes118
Files
-
dc78e3b16885178308ffe38d0e011c53_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ