ZoneIdentityPermissionAttribu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0202-22.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_0c06d0aca06e1a105223e18f1f7505b79f7a8f3e48aaa4c07a71e5e97ef94905
-
Size
364KB
-
MD5
4c64ba325cce55a8594c7a6cb338f6dc
-
SHA1
c2ca7ca8912aa4e8af6a2bfac62296b1c7beb801
-
SHA256
0c06d0aca06e1a105223e18f1f7505b79f7a8f3e48aaa4c07a71e5e97ef94905
-
SHA512
ffafa60137ce8211d7d231bd7cef564c4b936832e61519f8d91c25dbc298bd2a36c31d3b9701fdcbd505393d53081aa1ee29a8b70ea27ed89802f40d49cbfabe
-
SSDEEP
6144:sfLvCdAnlqbQillEXdmQQI+racD7/cTQIhOg0QKPs77HytoKA1:jGnwbQiDENmQQthD7kchg0QH778c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/0202-22.exe
Files
-
JaffaCakes118_0c06d0aca06e1a105223e18f1f7505b79f7a8f3e48aaa4c07a71e5e97ef94905.zip
Password: infected
-
e67eb2748cda32dc57b1fe3adbce20ea.rar
-
0202-22.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 459KB - Virtual size: 458KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ