Static task
static1
Behavioral task
behavioral1
Sample
7b552c175c725fb2d8b9f5a28e01045ec5d1ed444bd1220fa464d1e79a1eb631.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_f566a50594b589b0927a5c40b2d381945a1c90799d6ad7e9c2ce7bc75d09a778
-
Size
739KB
-
MD5
55fcd64f73750517898edbe36eb9ebb8
-
SHA1
ddeb26c4d2ce15e1d092444223cc2eee27e6251b
-
SHA256
f566a50594b589b0927a5c40b2d381945a1c90799d6ad7e9c2ce7bc75d09a778
-
SHA512
cc3d462b8b5cc346e2aad70eaa328a08179e9e7da84830fc6b74e5d7ec46afa7f9701aa16d656c8bd64d40c39ccc527436d2933ef3952c76830ec81ca781285d
-
SSDEEP
12288:cPTzKwBXol4KgrQ1S0Of4UJ6xSOTc2CXUHNc8+R/vqQ1rB0G:cP/Kw6l4KK/f3V28UtH+dvqAB0G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7b552c175c725fb2d8b9f5a28e01045ec5d1ed444bd1220fa464d1e79a1eb631
Files
-
JaffaCakes118_f566a50594b589b0927a5c40b2d381945a1c90799d6ad7e9c2ce7bc75d09a778.zip
Password: infected
-
7b552c175c725fb2d8b9f5a28e01045ec5d1ed444bd1220fa464d1e79a1eb631.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 940KB - Virtual size: 939KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ