Static task
static1
Behavioral task
behavioral1
Sample
cfb4e7b08343010cf746149e718c8737e4293390d02bc5bf30d46c5e73871651.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_57808e8e73a208f17c7dac4f72f70f28246702da963b1a4c81d660644fea15dc
-
Size
382KB
-
MD5
0d32c9af2af6656e3dac60625a9b3932
-
SHA1
992eb6312ce6c0ebf1cb4547fd6407fd33c3b887
-
SHA256
57808e8e73a208f17c7dac4f72f70f28246702da963b1a4c81d660644fea15dc
-
SHA512
dfbd793659a55cc98e7e283b64c87c9d0989b130aa85521cd99c32a0d7b49a1d1b1656eeeaa4e00ca5d6da4b7f4626b4ad0140b31e19f176cd6f6c86c1405a8b
-
SSDEEP
6144:YgwvsM1N7RlRIQYMMtJFECPvk0w4ZrzGBTrLoMCJieHUyLzWIpLfvt8sIcMKXiDq:YgqsQN9lmQrMtJuV4Z2DZOB3L9A0QHkn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cfb4e7b08343010cf746149e718c8737e4293390d02bc5bf30d46c5e73871651
Files
-
JaffaCakes118_57808e8e73a208f17c7dac4f72f70f28246702da963b1a4c81d660644fea15dc.zip
Password: infected
-
cfb4e7b08343010cf746149e718c8737e4293390d02bc5bf30d46c5e73871651.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 451KB - Virtual size: 450KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ