Static task
static1
Behavioral task
behavioral1
Sample
178320c786ffb920bc58344b39d3e8dac40205318a1aaf2346c5cb7a685087c2.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_77bcfbe04a67efa2509be0cad9ce5754bf6d5a2dd88be56d69d6247de27ed83e
-
Size
382KB
-
MD5
f1c80062318ced6969e823254fe59ba2
-
SHA1
4cc3ca4121300c266e0fd6f844a199ed440ed7ec
-
SHA256
77bcfbe04a67efa2509be0cad9ce5754bf6d5a2dd88be56d69d6247de27ed83e
-
SHA512
278262d4853356d5e9b712f988ad6f60b6996ef71fef04691e50185b4c01a071afc157d674db395c65f02f18f08dd3b093366947bc6f07e842b6c00686fe7b5c
-
SSDEEP
6144:diyn5jxX8y89z7N2TqCAcbKl0RPQv7+A3PE2HkIXBbheFkgDOEMqZohpBVIRkjnM:d5VxPC7QTle0RIDNE2HkChnMOEpoeRkg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/178320c786ffb920bc58344b39d3e8dac40205318a1aaf2346c5cb7a685087c2
Files
-
JaffaCakes118_77bcfbe04a67efa2509be0cad9ce5754bf6d5a2dd88be56d69d6247de27ed83e.zip
Password: infected
-
178320c786ffb920bc58344b39d3e8dac40205318a1aaf2346c5cb7a685087c2.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 476KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ