Static task
static1
Behavioral task
behavioral1
Sample
smtp-bypasser.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
smtp-bypasser.exe
Resource
win10v2004-20240802-en
General
-
Target
11b36ab5b09da04cb95bd40a3cabac84_JaffaCakes118
-
Size
19KB
-
MD5
11b36ab5b09da04cb95bd40a3cabac84
-
SHA1
276a36747af72287d84d06ac32fc2dcbfc74990f
-
SHA256
91c274284d10c2909c7885912cf6539e293be151e4f1ad281a1c60986734dd02
-
SHA512
6629c31f11c05a107d3cd552edf6acbf3425800506be78bbfa41e74bb5fa5fa2e16d91c98f7c2cde59a64ede8920c92013f78ef2d8a393295e4cbf707867b037
-
SSDEEP
384:hONo1O1Hfn5OcsXGKKxLiiW89QkqhxPkFNm2EBbZqx/8aQJ/Fh/V3KN:6r1Hf5BedeLiiW89khlqEFMxEtJ/Fh/Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/smtp-bypasser.exe
Files
-
11b36ab5b09da04cb95bd40a3cabac84_JaffaCakes118.zip
-
smtp-bypasser.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ