Static task
static1
Behavioral task
behavioral1
Sample
44ad61b91dc10bd9543918779a57235081fad13eada8330d03994c660be3c9e2.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_4002f5e73fb57305b475567dc9b874aab9219e8d105d73ae80c038c4358ee854
-
Size
595KB
-
MD5
efbbb21f03c71c717e0122ab2317fd46
-
SHA1
7c12bb2c8fa8d73b6421c685b6d19ed560f84278
-
SHA256
4002f5e73fb57305b475567dc9b874aab9219e8d105d73ae80c038c4358ee854
-
SHA512
4b243c7c60053067fb0b5e333fc7cf800f280e2ee89415ed2fe37593a303b28172d781f7c7341544a640d0420243525d68f60028cd1b013522377dc0a87f5ce6
-
SSDEEP
12288:RSc8pH/CEsUSjfpIa7MwOqyCjXPTMZRYhu4r0m:657sUSTaPFmXQnbm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/44ad61b91dc10bd9543918779a57235081fad13eada8330d03994c660be3c9e2
Files
-
JaffaCakes118_4002f5e73fb57305b475567dc9b874aab9219e8d105d73ae80c038c4358ee854.zip
Password: infected
-
44ad61b91dc10bd9543918779a57235081fad13eada8330d03994c660be3c9e2.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 672KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ