Static task
static1
Behavioral task
behavioral1
Sample
bed240a72fd5fc81f31342fd9cb218b9563c409b6558f9aa36fd39fc664ab76e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bed240a72fd5fc81f31342fd9cb218b9563c409b6558f9aa36fd39fc664ab76e.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_eeedcdaf8b25d53c4b78de28ea7314e0b4720f1020b2b04a917c24b70e115692
-
Size
268KB
-
MD5
49f268a31dfb5c92b1e387e217f79f34
-
SHA1
94494319b343646181a7ed11a2a2bb88e7a31794
-
SHA256
eeedcdaf8b25d53c4b78de28ea7314e0b4720f1020b2b04a917c24b70e115692
-
SHA512
de49caf42d937550d800e1115fc6877b1bb361032cf4f124b51a2e90cd6c4c5cb1234e7b517ae88610ef8fda9a0b9a3570d440aa0fada45d6fb7bdf8bbd4d9d4
-
SSDEEP
6144:fuK3Fgk1VXoSsJeysJIIP3ZHpGTrdXAFaxg7g/rakT:2K3FgtcysKIP3YhAcT/raQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/bed240a72fd5fc81f31342fd9cb218b9563c409b6558f9aa36fd39fc664ab76e
Files
-
JaffaCakes118_eeedcdaf8b25d53c4b78de28ea7314e0b4720f1020b2b04a917c24b70e115692.zip
Password: infected
-
bed240a72fd5fc81f31342fd9cb218b9563c409b6558f9aa36fd39fc664ab76e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 321KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ