Static task
static1
Behavioral task
behavioral1
Sample
e19b5109b7d4ecd4f5110fec0f74dd8ff3f36a09392df654b7800ec641d0e237.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e19b5109b7d4ecd4f5110fec0f74dd8ff3f36a09392df654b7800ec641d0e237.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_92f0f26b5ab4993993a4c4139638505e3c3e37aa706797e79ea7eaf507e096e3
-
Size
618KB
-
MD5
53deb232143c32fcd799d0245213b240
-
SHA1
b92fc7914a8e26b15413ac9e1aef2c6d0764c258
-
SHA256
92f0f26b5ab4993993a4c4139638505e3c3e37aa706797e79ea7eaf507e096e3
-
SHA512
2dfe5040b2c248674a7485afe9ad299ed8c6825e8f4e0cf411ab64c8e2ef83d908e7c354494fb4bbe3dbfbbf1c3922495b5bdc4d968d474c6251426184ecb899
-
SSDEEP
12288:3J5cI8cqYSaD7ARSTYaX+9xYPUOgjvbehVM3+Ih+Kvh3iN8Y:3KaIiTJs7vhSj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e19b5109b7d4ecd4f5110fec0f74dd8ff3f36a09392df654b7800ec641d0e237
Files
-
JaffaCakes118_92f0f26b5ab4993993a4c4139638505e3c3e37aa706797e79ea7eaf507e096e3.zip
Password: infected
-
e19b5109b7d4ecd4f5110fec0f74dd8ff3f36a09392df654b7800ec641d0e237.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 729KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ