Static task
static1
Behavioral task
behavioral1
Sample
cf32a7fab4126b3fa275f8b7e714dcdbe4ab261514d103b1bf8001aa6a065732.exe
Resource
win7-20240708-en
General
-
Target
JaffaCakes118_8d19675c89beeaffd944395fc470f0281758c9fbda6dc37749f8cb3439037947
-
Size
8.3MB
-
MD5
9b6fe5b3eb2bb96159056ec0ebbd7608
-
SHA1
a4baae622033a7b6b0dc8cc84ddd5297f5808d59
-
SHA256
8d19675c89beeaffd944395fc470f0281758c9fbda6dc37749f8cb3439037947
-
SHA512
29aaea62f8f5e690663515029fd5deda3d3929dfc9631d8263fbb8574914e2f3dda8c71f154c4067b6501445ca1a25759178d18b37f6eab53c1b957ca05be4e8
-
SSDEEP
196608:+BUEONt6gJRCrg4AOPTt4y/bvB6HvzzD8U1oUpRuhK36et:LtxRCrkT71Yvk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cf32a7fab4126b3fa275f8b7e714dcdbe4ab261514d103b1bf8001aa6a065732
Files
-
JaffaCakes118_8d19675c89beeaffd944395fc470f0281758c9fbda6dc37749f8cb3439037947.zip
Password: infected
-
cf32a7fab4126b3fa275f8b7e714dcdbe4ab261514d103b1bf8001aa6a065732.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9.3MB - Virtual size: 9.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ