Static task
static1
Behavioral task
behavioral1
Sample
608355d27f442ae5c435b22fa9c5757fe324ad753eb48755cbd92b8aa1e161ee.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_46ccd7e9a3a8e24617a1a4b86de35b63b78e7f3b2472e9f920dc0fc691835dcd
-
Size
715KB
-
MD5
c039a23e7e5edb457bfb956e0ed636e4
-
SHA1
1d6e73d8cd6fd9a03e05b2ccb7c04d2348fa5afb
-
SHA256
46ccd7e9a3a8e24617a1a4b86de35b63b78e7f3b2472e9f920dc0fc691835dcd
-
SHA512
e0e02d50c0b43607fc50b5bdb89cf33c759d71d14efcd495842d34b861921d83cc1803435e1090a89c9bf11756e5d15514789a65fc5c1c96d34609f75c84d6db
-
SSDEEP
12288:5TISC1bCfTSEzVMWm1YdOhLrZE+9V6hXcZmrbzpPsfHxTT3i0nk8Y4yJDP9wCgxi:5TxC1OfBJwYdOhXK+8b9Pq5T3i0kBZ9R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/608355d27f442ae5c435b22fa9c5757fe324ad753eb48755cbd92b8aa1e161ee.exe
Files
-
JaffaCakes118_46ccd7e9a3a8e24617a1a4b86de35b63b78e7f3b2472e9f920dc0fc691835dcd.zip
Password: infected
-
608355d27f442ae5c435b22fa9c5757fe324ad753eb48755cbd92b8aa1e161ee.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1011KB - Virtual size: 1011KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ