Static task
static1
Behavioral task
behavioral1
Sample
a0b19468a7896874e57b014b28e8d3abd1707e2b52a8ef1bf516d4c1a76a7b42.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_6f898006f76992ff78c22aaf03ab2c1ed3ae9d5a175612f3e0033d35af1d99cc
-
Size
571KB
-
MD5
231756c82e4b20ac6b2808386f873968
-
SHA1
9ce721cb0c2afc773a923f2a64ce4fae307dc321
-
SHA256
6f898006f76992ff78c22aaf03ab2c1ed3ae9d5a175612f3e0033d35af1d99cc
-
SHA512
e8ef41f5b81d851774f92c4b577d4a8b8fe4660e84a5d7ed9b21fa818d827345f38d1ed249bfedca335452c50394c6c4987db8549947134ccb73c73909858522
-
SSDEEP
6144:puz+PXFmEOpUkNaG/b3DSZ/h5lKr0isFVy3kw6ZACGPhggb82HAil7hccFIfUIPL:TXItDDU5em/kqgDHhlNIdZLiZxZPwtg0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a0b19468a7896874e57b014b28e8d3abd1707e2b52a8ef1bf516d4c1a76a7b42
Files
-
JaffaCakes118_6f898006f76992ff78c22aaf03ab2c1ed3ae9d5a175612f3e0033d35af1d99cc.zip
Password: infected
-
a0b19468a7896874e57b014b28e8d3abd1707e2b52a8ef1bf516d4c1a76a7b42.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 866KB - Virtual size: 865KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ