Static task
static1
Behavioral task
behavioral1
Sample
5b78695e898c8a3056adf8ee556007d174ddb2c3bff377c0ca53a30746419c0f.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_e889bc4361aa8e1a5fff453e4fc79b363cbba4dd3b1bf2db424f02e573a4616c
-
Size
469KB
-
MD5
787d91f0e1da36389aaa34870b177cb6
-
SHA1
90ad143646abc2c00e2a8a430817288d6ab14365
-
SHA256
e889bc4361aa8e1a5fff453e4fc79b363cbba4dd3b1bf2db424f02e573a4616c
-
SHA512
b78cb00e5ddbf67ad7c01044d8409682cc845bd78f61c4e52e4b957894c5829ebf07a5aaa5521a3d8a6160d6ea3e1ab0fe16b207696c45048ad1c98e0d342102
-
SSDEEP
6144:m13IYlOilvyWanqI5TJNrL7UW0e4BPJL+Ks/yTOauvWar29fBNJn0ZLcxlrQFt/e:qV7aWHIRnLqBP93suOaGWar2hKZAb8vi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5b78695e898c8a3056adf8ee556007d174ddb2c3bff377c0ca53a30746419c0f
Files
-
JaffaCakes118_e889bc4361aa8e1a5fff453e4fc79b363cbba4dd3b1bf2db424f02e573a4616c.zip
Password: infected
-
5b78695e898c8a3056adf8ee556007d174ddb2c3bff377c0ca53a30746419c0f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 491KB - Virtual size: 491KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ