Static task
static1
Behavioral task
behavioral1
Sample
6f7b96dc7619ee8771b4bcfd5728662eae5ef1757ffd5dca70c956270e8a47b9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6f7b96dc7619ee8771b4bcfd5728662eae5ef1757ffd5dca70c956270e8a47b9.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_7a7dc0189995af994c3c59cae4bbedfcfe3092eda5c504f55128677b0473cdf0
-
Size
536KB
-
MD5
7dfd390f16ff73cc9b6e69c90539cd60
-
SHA1
dc96f3a03bb3d64c7919228fde53e92f59147ae6
-
SHA256
7a7dc0189995af994c3c59cae4bbedfcfe3092eda5c504f55128677b0473cdf0
-
SHA512
e42fd61598bf34dcd57eb1dac2df64e4ddb58d2828263764c6f9d3059f50e06fae09e7a5f00394868830bd715d72e4d8445b5c8f1756a13208c0bbd256f16507
-
SSDEEP
12288:HWSnIPPjXKgGI3kGtEdqw6idCN/Bg/Ps/Lqjne7TDnzJyld4w:2SIPPn9UojpioM/Pmqje7TRM4w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6f7b96dc7619ee8771b4bcfd5728662eae5ef1757ffd5dca70c956270e8a47b9
Files
-
JaffaCakes118_7a7dc0189995af994c3c59cae4bbedfcfe3092eda5c504f55128677b0473cdf0.zip
Password: infected
-
6f7b96dc7619ee8771b4bcfd5728662eae5ef1757ffd5dca70c956270e8a47b9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 540KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ