Static task
static1
Behavioral task
behavioral1
Sample
ee251c7192a96cc30188ef633706e3e5d25b75cbfc80fe47ac698f5c4bd96353.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_ad64f1a33064adc8a0c29975a6edc76862e1329837d054f2ebce51a37ab6a630
-
Size
614KB
-
MD5
25d7b76185c3579f9470a0cd1c627cf9
-
SHA1
c50bd491b69eebad87233ba71d8e43ab820615a5
-
SHA256
ad64f1a33064adc8a0c29975a6edc76862e1329837d054f2ebce51a37ab6a630
-
SHA512
2d29958effb0a7d9a44c31c0177add5eea2086f676e6dfe4dd4a757a30c36999134db76e4b38f22fc90708af6995ea11f658cc366b477a54c78a9ee99830c624
-
SSDEEP
12288:zb1g7ImgYjYQOrVy6/iL6jO1GXImuBbEJ1KHruiiX2il8rM5oZ:zb1g7EiYQiLJjOInuBTqiiX268r3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ee251c7192a96cc30188ef633706e3e5d25b75cbfc80fe47ac698f5c4bd96353
Files
-
JaffaCakes118_ad64f1a33064adc8a0c29975a6edc76862e1329837d054f2ebce51a37ab6a630.zip
Password: infected
-
ee251c7192a96cc30188ef633706e3e5d25b75cbfc80fe47ac698f5c4bd96353.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 672KB - Virtual size: 671KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ