Behavioral task
behavioral1
Sample
JaffaCakes118_70cb7c276f3bdfd79dd60eea91bc5e9792d2f217c9836d3a5c0d299d918dcff1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_70cb7c276f3bdfd79dd60eea91bc5e9792d2f217c9836d3a5c0d299d918dcff1.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_70cb7c276f3bdfd79dd60eea91bc5e9792d2f217c9836d3a5c0d299d918dcff1
-
Size
232KB
-
MD5
5f677e323b589442df9f3ea68ab5bd06
-
SHA1
d629fd206f48427f0127d2f0cf4640b54ee2c743
-
SHA256
70cb7c276f3bdfd79dd60eea91bc5e9792d2f217c9836d3a5c0d299d918dcff1
-
SHA512
19b5cb5899c2d503b54c2e4abae4a0d9fe91a779dc51a86c507f9b08f8068c4fc5d4b8844f32b7f34f81d84a1e10926a5faa82bf774bb62da3e8105cd8106085
-
SSDEEP
3072:ice27kZEQ4phORsbtH8qwXofOZ3U9gGzPEws5vSv/9d+kKBSAhM6TUh+AMy:peeqctH8q7w3U9gGSav/9d9WW+
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_70cb7c276f3bdfd79dd60eea91bc5e9792d2f217c9836d3a5c0d299d918dcff1
Files
-
JaffaCakes118_70cb7c276f3bdfd79dd60eea91bc5e9792d2f217c9836d3a5c0d299d918dcff1.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ