Static task
static1
Behavioral task
behavioral1
Sample
4fa7679f4f0241ed1e5d63fbae526ff506dd45c350badb0cbb02f7aca61e0ad5.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_bc7663c89073cebc93986a508b544590df0d10658fe349e8504490101fc7e5cd
-
Size
920KB
-
MD5
ce9b1f8c8d48a92e21db892bf111f19a
-
SHA1
adf6782d2ee003832f4f6a2eec18d7e0e3cb1358
-
SHA256
bc7663c89073cebc93986a508b544590df0d10658fe349e8504490101fc7e5cd
-
SHA512
55e07ba8c1e0fd04885b4c8013bd145b95c1f1f2b386238c735cb17f4d5e153c750902012e384bc07c47b16000c6f148e542c27645d494a78c4ddd0e52323c05
-
SSDEEP
24576:ZWV8R4WcbnuPaR1Pppu/H8alv0rWOu0pzG7kO9wPKt:4VjWcbnOwpvalvUuQD+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4fa7679f4f0241ed1e5d63fbae526ff506dd45c350badb0cbb02f7aca61e0ad5
Files
-
JaffaCakes118_bc7663c89073cebc93986a508b544590df0d10658fe349e8504490101fc7e5cd.zip
Password: infected
-
4fa7679f4f0241ed1e5d63fbae526ff506dd45c350badb0cbb02f7aca61e0ad5.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ