Static task
static1
Behavioral task
behavioral1
Sample
9bad42bc794306c3ed433fcc5ee6c67fe371002778af06608508fd96a5f7e794.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9bad42bc794306c3ed433fcc5ee6c67fe371002778af06608508fd96a5f7e794.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_b11f0af903882827ef1e160d558b51099d8b3396f93f253f10343a866d0cf5e3
-
Size
394KB
-
MD5
4ecbbb3120cff4d24406f9c052076a7b
-
SHA1
e5ff7e90a80ae771b73ddfb0765d3fe47e62c443
-
SHA256
b11f0af903882827ef1e160d558b51099d8b3396f93f253f10343a866d0cf5e3
-
SHA512
d4dddc75e328a4a6361989f815d9e5e4cce95ef2acc4b76b178643ab94befc7011050144ad6bdf461e6c8ff1a4f4867d2fd6904dbdebc2e2588717e812af0308
-
SSDEEP
6144:VeBDwAjEAG1GfI/V1q8UWgZzrhEK0ZjjWO1rcU3xm7b7HLoPWxNoddAhRJMxMu:s/AR1GQxcXWjprP3xm7nXxcKhRJYv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9bad42bc794306c3ed433fcc5ee6c67fe371002778af06608508fd96a5f7e794
Files
-
JaffaCakes118_b11f0af903882827ef1e160d558b51099d8b3396f93f253f10343a866d0cf5e3.zip
-
9bad42bc794306c3ed433fcc5ee6c67fe371002778af06608508fd96a5f7e794.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 572KB - Virtual size: 571KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ