Static task
static1
Behavioral task
behavioral1
Sample
LSASecretsViewjiemigongju/HA_LSASecretsView1.21_LRH.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
LSASecretsViewjiemigongju/HA_LSASecretsView1.21_LRH.exe
Resource
win10v2004-20241007-en
General
-
Target
36ffa9674ff240b836ead3066cc534de_JaffaCakes118
-
Size
1.3MB
-
MD5
36ffa9674ff240b836ead3066cc534de
-
SHA1
d594264f4cba15f60e965692292702e762ec8976
-
SHA256
f7933bd33faa0730ff8137b00cdb3bc8f91bc0443d07b33bba569cae34acf55e
-
SHA512
f17fb8339f9cfc67ac913812685e74322b2fec8d2b254d7a74397d65c5f2c0b4ab3b55a1b9b9712c21d59a0809a2b3cdb86d24fcb87d363c25d8eaeb3790a0c7
-
SSDEEP
24576:o+Pzbw6D9YrZLvoltZ5laiRsgBEEa3LpS0r+iyBQrx0eoSolZY:5DD2NLvGtl5sgEDbpSArKzZY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/LSASecretsViewjiemigongju/HA_LSASecretsView1.21_LRH.exe
Files
-
36ffa9674ff240b836ead3066cc534de_JaffaCakes118.zip
-
LSASecretsViewjiemigongju/HA_LSASecretsView1.21_LRH.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.Ray Size: - Virtual size: 624KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Ray Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Ray Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE