Behavioral task
behavioral1
Sample
JaffaCakes118_b9839d0d8d9ff4d832fd1e26fdad7c3e0ee6362049130d633220781af910339f.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_b9839d0d8d9ff4d832fd1e26fdad7c3e0ee6362049130d633220781af910339f.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_b9839d0d8d9ff4d832fd1e26fdad7c3e0ee6362049130d633220781af910339f
-
Size
292KB
-
MD5
15b56056c97c5c452a2aeb3fa4a98f70
-
SHA1
4ec898fcfa010ba01d15206aac0597a8a17ba88a
-
SHA256
b9839d0d8d9ff4d832fd1e26fdad7c3e0ee6362049130d633220781af910339f
-
SHA512
f1469af98041fde83f3171fab564ccec083ed152c757024dac412e8464a85f204706eb97458306f3bf1db0ba3ea8841a29d3f3ec2bd300cb4d80030935190deb
-
SSDEEP
6144:PR2xmZwhPS7mVzNT//FJZ1D1NV9CKqUJvHdIP76TJkoidgrVdPwTW8p:AMZwdS7mpNT//FJZvNzJhIP76/PwTW
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b9839d0d8d9ff4d832fd1e26fdad7c3e0ee6362049130d633220781af910339f
Files
-
JaffaCakes118_b9839d0d8d9ff4d832fd1e26fdad7c3e0ee6362049130d633220781af910339f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ