Static task
static1
Behavioral task
behavioral1
Sample
0dd71b416418079bff4bad29f3e4799d9bda2ce728187e99ef3f9fe7ea449781.exe
Resource
win7-20240729-en
General
-
Target
JaffaCakes118_841bae2dc530052caa7792ef242cc3baf8feb5f7329e772080fc773e800fd21b
-
Size
789KB
-
MD5
3b2a1c7b0d8451c20827fb10a4e7103b
-
SHA1
65205af0189b511f704873cca6fa23d77fc5c86c
-
SHA256
841bae2dc530052caa7792ef242cc3baf8feb5f7329e772080fc773e800fd21b
-
SHA512
1818e555b653fb19d7b809bdae8bf2bcbe9455ac5135f702f60275ec5c1258c3e79c2c02d40df042da2026ce82ffe7357806f6d581ba1b7b87f3f5eb507c773e
-
SSDEEP
24576:ehSQsjmSlEYu+qN4BZ/N4yiOJ/svzLlLfr8sfrEd+rzShb4tk3UM:e4jBEYF2IF4jy/svz5P0+rCl3UM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0dd71b416418079bff4bad29f3e4799d9bda2ce728187e99ef3f9fe7ea449781.bin
Files
-
JaffaCakes118_841bae2dc530052caa7792ef242cc3baf8feb5f7329e772080fc773e800fd21b.zip
Password: infected
-
0dd71b416418079bff4bad29f3e4799d9bda2ce728187e99ef3f9fe7ea449781.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 824KB - Virtual size: 823KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ