Static task
static1
Behavioral task
behavioral1
Sample
NOAH SEPTEMBER_crypted.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
NOAH SEPTEMBER_crypted.exe
Resource
win10v2004-20240802-en
General
-
Target
fdfb7f3a01e04bb271f670877d6b143e_JaffaCakes118
-
Size
412KB
-
MD5
fdfb7f3a01e04bb271f670877d6b143e
-
SHA1
956f0ef514775931c21b1d4ac392299525f01938
-
SHA256
369a7731de6cd9b19a81591905150186097c002237a6d4c3c966ad449ff4ab30
-
SHA512
223117593ed68da75224947c476f463930b83d854fc50737cf782d1ae138ec9f8a67d3dd7ec954a404f982c043e0e97f8f20431969f322483d2584034dc2dba4
-
SSDEEP
12288:HbnspONGCDe/KLnPmOfiBm+QB96Z0PlRjSMdahlyJh4:Hbnw2RLnuaiBEBo0PlRWbhls4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NOAH SEPTEMBER_crypted.exe
Files
-
fdfb7f3a01e04bb271f670877d6b143e_JaffaCakes118.rar
-
NOAH SEPTEMBER_crypted.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 534KB - Virtual size: 534KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ