Static task
static1
Behavioral task
behavioral1
Sample
38e1bbae005365e92cf80aa6ef199d5107af57fde3afb02c31dc1bde875c68f7.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_72e7f51955137137fbdaee4a2b4874e3173f96fd5067fdfecb088ff3b790aa15
-
Size
474KB
-
MD5
284a5ce6226cdfbf4d1d490c39731117
-
SHA1
b6888fee65da93aa3600029d7ff0b9d340414df6
-
SHA256
72e7f51955137137fbdaee4a2b4874e3173f96fd5067fdfecb088ff3b790aa15
-
SHA512
f6618bd78eab936274a96a02f5abd4af597df2f6b9ce00f91e0d75d075583ea40e9af476c8d9541a9e2ad1a63d70dd4284bcbbf0fc1a8270c9fb14f5cc48fef9
-
SSDEEP
12288:IR8BgAQhWrv3B2fKdbYTX9XOyIHbrG4cZ0gdG/52Vn1SJtUR:7uAQhuv3kfKdbYTX5I79b+k2V1YSR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/38e1bbae005365e92cf80aa6ef199d5107af57fde3afb02c31dc1bde875c68f7
Files
-
JaffaCakes118_72e7f51955137137fbdaee4a2b4874e3173f96fd5067fdfecb088ff3b790aa15.zip
-
38e1bbae005365e92cf80aa6ef199d5107af57fde3afb02c31dc1bde875c68f7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 691KB - Virtual size: 690KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ