Static task
static1
Behavioral task
behavioral1
Sample
d9789bfbc54d5cb6d52c385fd8f5d288_JaffaCakes118.exe
Resource
win11-20241007-en
General
-
Target
241209-n5y4sa1nar_pw_infected.zip
-
Size
23KB
-
MD5
341e29f1e0cc1d9fbfd3c7fc53d41c48
-
SHA1
b21f1f27b41f686285a21e84cc731eb02ec6fc47
-
SHA256
4ce9095a92d1112eed2fdf1ffaf6d9c007224203037dd0b8a3a20e7fcb10f015
-
SHA512
d5d6bea413dc9d9aba5001c6f3bb6854e831faa2719c7e2076319a7802efbde1e51909408e138788fed7b409fad2979f7c6ad8f4c07ce4cfea25e92ba2ffde2f
-
SSDEEP
384:YBh3pkxBVIvRFHqvf4UOeg8Vbt8s7eD7XB1vD2IeDEnpEtzCfPSyOUxaAjxxUvcb:YB0baSH4UVg8xtr7ePRV2IQ++tz+PqKh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d9789bfbc54d5cb6d52c385fd8f5d288_JaffaCakes118
Files
-
241209-n5y4sa1nar_pw_infected.zip.zip
Password: infected
-
d9789bfbc54d5cb6d52c385fd8f5d288_JaffaCakes118.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
text Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE