Static task
static1
Behavioral task
behavioral1
Sample
0f0fddacabc294b1f3497b9b97142d0b85e30d2acb646123ac122601c11e7c4e.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_f145c1907d0def14710275984e237522353d364a3e0db3c80da16d927028f3ea
-
Size
7.9MB
-
MD5
673f03f4bc936698b12814e3733f39e1
-
SHA1
f63fc01108f7f6fa371116e1e884260cf08ebd26
-
SHA256
f145c1907d0def14710275984e237522353d364a3e0db3c80da16d927028f3ea
-
SHA512
42a5090b44694e9f9fe55878d7087b585667eb3bb9c375e552997a60808f600e3224b0f71f1592a808c9d5796df4b64916ce7cdbd7766700b645ad5b07ba5bc6
-
SSDEEP
196608:/fFcW1loyyEfHCzAWZJLKU7v4650rxEp7h/GzqA3A9tC:lcW1lKEnWjKBqsCp7R4qJC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0f0fddacabc294b1f3497b9b97142d0b85e30d2acb646123ac122601c11e7c4e
Files
-
JaffaCakes118_f145c1907d0def14710275984e237522353d364a3e0db3c80da16d927028f3ea.zip
Password: infected
-
0f0fddacabc294b1f3497b9b97142d0b85e30d2acb646123ac122601c11e7c4e.exe windows:6 windows x86 arch:x86
2c2c8a0f07b8dabf29d974b2f09dbdf9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetProcessWindowStation
Sections
.MPRESS1 Size: 6.8MB - Virtual size: 14.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE