Behavioral task
behavioral1
Sample
e6a304a190393045871a1144609dc414_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e6a304a190393045871a1144609dc414_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e6a304a190393045871a1144609dc414_JaffaCakes118
-
Size
12KB
-
MD5
e6a304a190393045871a1144609dc414
-
SHA1
3606ac6e3d8ee7087e8a92da44bdbf6169794bb0
-
SHA256
6ad6f24871ddeedb5dd1fd49abec8faae3a0809b3211c7ecce5fbce40dd28a75
-
SHA512
0b1e93ba45bbc756a8cc2838272b7e0427553a4f464b3c46fb0490a51ea19a8ae88932f1b9dd177ed2a797c3d53ab59d71d1afa73f3c65262a31455c24b68261
-
SSDEEP
192:pLU/9thAs3VkI0Z2tQN6WcoEuQqMT0U2/JT0JN7Kaemj:pLU/9tis3VkI0Z2iN6NBpnT0UUKN7KO
Malware Config
Extracted
purecrypter
https://store2.gofile.io/download/15a5b26e-809f-49c3-aa8f-3c0a207e9711/Fsyymzlzzxciphnzblhopzku.dll
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e6a304a190393045871a1144609dc414_JaffaCakes118
Files
-
e6a304a190393045871a1144609dc414_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ