Static task
static1
Behavioral task
behavioral1
Sample
894875eba3d359b0f02b3a4a38de35cfe06dc0633b96a43be14c1c4869b5a667.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_4cf3adf6ecaf8ec4005f6c29e806e68fac011f21c9c1920a4a3efa03e62151e6
-
Size
46KB
-
MD5
957c9a55c5f0c368f3b35186a7cadcef
-
SHA1
f3c41eeac7815b66fdf0230090cb49e77dd2637a
-
SHA256
4cf3adf6ecaf8ec4005f6c29e806e68fac011f21c9c1920a4a3efa03e62151e6
-
SHA512
3a7b88fd6bf0477fe9588291ead883dee3531e866c9b7b7d8c8078f48452899b96768c2b0932f0c9cced7002f5ac53697c74dcbdb02eb5a1f42627aacc261a99
-
SSDEEP
768:FXXk3THZjCqMC3xByJekL/KKp4LqpqZIZYUmVr2VG4RMLBwhabvEOvcp/SCQ:FXIZj1J3Dy7bpp7pwI2UMl4RyBLvcpO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/894875eba3d359b0f02b3a4a38de35cfe06dc0633b96a43be14c1c4869b5a667
Files
-
JaffaCakes118_4cf3adf6ecaf8ec4005f6c29e806e68fac011f21c9c1920a4a3efa03e62151e6.zip
Password: infected
-
894875eba3d359b0f02b3a4a38de35cfe06dc0633b96a43be14c1c4869b5a667.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ