Behavioral task
behavioral1
Sample
JaffaCakes118_1935fa2471a9f5d268443521701d42acf95408605e4ee043074c331da642bdcb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_1935fa2471a9f5d268443521701d42acf95408605e4ee043074c331da642bdcb.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_1935fa2471a9f5d268443521701d42acf95408605e4ee043074c331da642bdcb
-
Size
340KB
-
MD5
776df5a3526e24a1476834f8c7f76322
-
SHA1
bf08383533f76780eb9011bc64cf49cbb8805380
-
SHA256
1935fa2471a9f5d268443521701d42acf95408605e4ee043074c331da642bdcb
-
SHA512
d5fa8a8e34b37315d9456d218c1af996cc1fcbaf6092a1da170ef8a831ebbb5c0c219624d445076e7250fa170ca935f9ea72bbfb95cd66367ad950701df96f60
-
SSDEEP
3072:IhRykxCdEYXNbq6I7GN1O+ypbFRsUsYWY02Nt3IlAZK3GF1uCQ0UdzezHOj7g5Xv:AR2d1O1cUP0UtEH3AGezHmxR3Uo6EG
Malware Config
Signatures
-
AgentTesla payload 1 IoCs
resource yara_rule sample family_agenttesla -
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_1935fa2471a9f5d268443521701d42acf95408605e4ee043074c331da642bdcb
Files
-
JaffaCakes118_1935fa2471a9f5d268443521701d42acf95408605e4ee043074c331da642bdcb.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ