Static task
static1
Behavioral task
behavioral1
Sample
38e1bbae005365e92cf80aa6ef199d5107af57fde3afb02c31dc1bde875c68f7.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_89609c6e1373264312594816f10bb5c7b4c742fd674f1d6c1c87c032df69d673
-
Size
474KB
-
MD5
764db22f48202df2bf9b275aed1d1b41
-
SHA1
81b4ba9d11bb65791c5c88704e9e707665a80bd2
-
SHA256
89609c6e1373264312594816f10bb5c7b4c742fd674f1d6c1c87c032df69d673
-
SHA512
a6bce27d3cea0f397db9050aefda293ee97019d68de53a935305bd397c6e236da697f534c2a7893601b89cced5a7c86108b67286aac5a759d3df1570be6b34ee
-
SSDEEP
12288:oR8BgAQhWrv3B2fKdbYTX9XOyIHbrG4cZ0gdG/52Vn1SJtUp:buAQhuv3kfKdbYTX5I79b+k2V1YSp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/38e1bbae005365e92cf80aa6ef199d5107af57fde3afb02c31dc1bde875c68f7
Files
-
JaffaCakes118_89609c6e1373264312594816f10bb5c7b4c742fd674f1d6c1c87c032df69d673.zip
-
38e1bbae005365e92cf80aa6ef199d5107af57fde3afb02c31dc1bde875c68f7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 691KB - Virtual size: 690KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ