Static task
static1
Behavioral task
behavioral1
Sample
6a36fc61244a9c100ecb35b0698a8c594029de2d84b0c84949fcee0aa683da98~.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6a36fc61244a9c100ecb35b0698a8c594029de2d84b0c84949fcee0aa683da98~.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_0821eba61fb94127cb2f4ffb4e51986b08de7f9843474d5419ec54a66e93fc8d
-
Size
273KB
-
MD5
047c9da300be13d79b53eecb9c5c5f1d
-
SHA1
01ba26f8a2e1ff7c4b1f0ead51d4ead2b6e27fe3
-
SHA256
0821eba61fb94127cb2f4ffb4e51986b08de7f9843474d5419ec54a66e93fc8d
-
SHA512
781daec49cef05d0cfe9aac934b865ceee62be33e0dfd47e4bd95ec0201fe4d426989ede0ef371b4bd155f47365e3d3ff9ba0f5bf37bb710e7827a601d430667
-
SSDEEP
6144:08ZTSzRo+BEreilz7SdJVAGXDzVPZboos6ESYBm+wwF:fTgB6+JrZUckmGF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/6a36fc61244a9c100ecb35b0698a8c594029de2d84b0c84949fcee0aa683da98~
Files
-
JaffaCakes118_0821eba61fb94127cb2f4ffb4e51986b08de7f9843474d5419ec54a66e93fc8d.zip
Password: infected
-
6a36fc61244a9c100ecb35b0698a8c594029de2d84b0c84949fcee0aa683da98.xz
-
6a36fc61244a9c100ecb35b0698a8c594029de2d84b0c84949fcee0aa683da98~.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ