Static task
static1
Behavioral task
behavioral1
Sample
ec0be7b7b2dc0a162eee2673bb94370a8b7eef222856ceeed9126f123050d1fb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec0be7b7b2dc0a162eee2673bb94370a8b7eef222856ceeed9126f123050d1fb.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_1a48ab3724c838e76117fb4ee86271f27351377c978c482e647afd25dec71c4c
-
Size
502KB
-
MD5
56eaf98f1e5ba8dbed540473d31d65d3
-
SHA1
11c823452750ff5ee87639d75dc0505540ac3888
-
SHA256
1a48ab3724c838e76117fb4ee86271f27351377c978c482e647afd25dec71c4c
-
SHA512
c7b1d387484235e47fbaf73cc8e3870b3d7c9e9838d3f2c97b03d9e5d95ad696d58142ebb4fbe9093bf027deff4e872630f23a51f972afd4740a2984b8405d1f
-
SSDEEP
12288:tQ2h6fw7i3bDl6KXFAz+CdQiq7B3ZgH7etKuqeKUK7avV2IfySW3ra:thhqw7iHFByQigrtKwK7avIIf8ba
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ec0be7b7b2dc0a162eee2673bb94370a8b7eef222856ceeed9126f123050d1fb.exe
Files
-
JaffaCakes118_1a48ab3724c838e76117fb4ee86271f27351377c978c482e647afd25dec71c4c.zip
Password: infected
-
ec0be7b7b2dc0a162eee2673bb94370a8b7eef222856ceeed9126f123050d1fb.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 648KB - Virtual size: 647KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ