Static task
static1
Behavioral task
behavioral1
Sample
5c641b6db0eefe6714c87ff5b82d14671996c85e9614ba1eb4b036f4ee551dea.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_7d6ef45060d18fa8c4d6a4740f0aa59b4b02d62efd72d2178977d520ccd6f38f
-
Size
710KB
-
MD5
4fd8e3f0fb95d19b5352f9416ec3408b
-
SHA1
f6424639d298d703ddc6a8bcacf9c8d186308abb
-
SHA256
7d6ef45060d18fa8c4d6a4740f0aa59b4b02d62efd72d2178977d520ccd6f38f
-
SHA512
82c21d3233490b21b9e28f0d0639229699ac86d8b091b7119b364a763e32c20505ea91284892016effca3d361fabf14353a79c71ddbc6e3b31383e3ff4b08700
-
SSDEEP
12288:4UsTP2iukABz3yN+w/yqdjTkI91wNlprNFVEv2j/MBqK7hLCXzL:4U8VASZT591wNXNPE7d+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5c641b6db0eefe6714c87ff5b82d14671996c85e9614ba1eb4b036f4ee551dea
Files
-
JaffaCakes118_7d6ef45060d18fa8c4d6a4740f0aa59b4b02d62efd72d2178977d520ccd6f38f.zip
Password: infected
-
5c641b6db0eefe6714c87ff5b82d14671996c85e9614ba1eb4b036f4ee551dea.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 862KB - Virtual size: 862KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ