Behavioral task
behavioral1
Sample
JaffaCakes118_d8288df2aa8492ce9d342b81e75c33b2db080b6efa0ced90c2a4d28a0e9a3efe.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_d8288df2aa8492ce9d342b81e75c33b2db080b6efa0ced90c2a4d28a0e9a3efe.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_d8288df2aa8492ce9d342b81e75c33b2db080b6efa0ced90c2a4d28a0e9a3efe
-
Size
48KB
-
MD5
c47df7fcea58ef8528e9a90c9028c600
-
SHA1
a9cec18b9d5b71ebcae93a695039d9cccb088889
-
SHA256
d8288df2aa8492ce9d342b81e75c33b2db080b6efa0ced90c2a4d28a0e9a3efe
-
SHA512
9bd9204ea1735172b50441495c040c74858ed99b70d349809038a9f4c428f0bcc53b7d9ab53a8d56cf47f3f66dde6c7b7b780ee59bee0c237e64b255bec1b513
-
SSDEEP
384:n0bUe5XB4e0X7OxZgFS6Z/73AWTPtTUFQqz9kObb7:sT9BuCYS6BZub7
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_d8288df2aa8492ce9d342b81e75c33b2db080b6efa0ced90c2a4d28a0e9a3efe
Files
-
JaffaCakes118_d8288df2aa8492ce9d342b81e75c33b2db080b6efa0ced90c2a4d28a0e9a3efe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ