Static task
static1
Behavioral task
behavioral1
Sample
a52d9b136a8a439dab2da1d870ab2a75d2847817191bc785e3894c95b9c9eff7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a52d9b136a8a439dab2da1d870ab2a75d2847817191bc785e3894c95b9c9eff7.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_b4fab30e3e48d0b9f565b1ba0aeb34a9c340bc67e71b34cc24a96224ad2577e2
-
Size
289KB
-
MD5
f3b19bc7454f0585e6016d94d7d8821c
-
SHA1
393b27819acc6aed94aff07fd5a3e19debe3723d
-
SHA256
b4fab30e3e48d0b9f565b1ba0aeb34a9c340bc67e71b34cc24a96224ad2577e2
-
SHA512
3033a859bad3aec036aa6bab5fd1a12c915352f4dfaba7f1d80ed43c1a282e6793bc06167799286211d10d17c6e5484d60c079ce45dc698a3259bf0780b6528d
-
SSDEEP
6144:qEkBva/Ua7M5So2ZhO8rsG+Q00v0Amre9MgQQWU61yqpSjOqc4:qEkxa/Ua7M5R2ZhXs+mS91QQt6g6SyqF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a52d9b136a8a439dab2da1d870ab2a75d2847817191bc785e3894c95b9c9eff7
Files
-
JaffaCakes118_b4fab30e3e48d0b9f565b1ba0aeb34a9c340bc67e71b34cc24a96224ad2577e2.zip
Password: infected
-
a52d9b136a8a439dab2da1d870ab2a75d2847817191bc785e3894c95b9c9eff7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 409KB - Virtual size: 409KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ