Static task
static1
Behavioral task
behavioral1
Sample
fa958470655b38f6efcfcc94d9d9c41153a840e46593a092ebf158ebc02059a0.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_d80af7862cef512d90e2b4605667de680679c468b70986e2cf0d15f85e97f44d
-
Size
8.0MB
-
MD5
b7b7731b8b9ca6b72bd85d89fe3f32f4
-
SHA1
4f7261fc5e6711c45de2e6999700ffb4ecd74a9f
-
SHA256
d80af7862cef512d90e2b4605667de680679c468b70986e2cf0d15f85e97f44d
-
SHA512
e101179579850ba3e55112ec312cbb3e45ee11199045023543ab067f7ae1afdd1f081e2a268081f8312f78b945c58ac8537729f0db46f7845890902f36a84222
-
SSDEEP
196608:ie7SMiHHnIdvpp6Sfc0Z8rcPvYJihepxGoqOE:iPMWHypk0Z8gXCihqKH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fa958470655b38f6efcfcc94d9d9c41153a840e46593a092ebf158ebc02059a0
Files
-
JaffaCakes118_d80af7862cef512d90e2b4605667de680679c468b70986e2cf0d15f85e97f44d.zip
Password: infected
-
fa958470655b38f6efcfcc94d9d9c41153a840e46593a092ebf158ebc02059a0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 229KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 7.9MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ