Static task
static1
Behavioral task
behavioral1
Sample
97504b3dbc2dfe20922f3323f905aa9d4f5f440720cab63dd26c82f26f7d76a2.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_19157045ecc10e0db37a1f84bf66614822f3256bb240f9ee1342295e37aa64a9
-
Size
739KB
-
MD5
4d3e1aa51216b9fd2f5b1ad2e6077702
-
SHA1
22204802ba2462a3a2836b44787132181f0e4ddf
-
SHA256
19157045ecc10e0db37a1f84bf66614822f3256bb240f9ee1342295e37aa64a9
-
SHA512
a462a9acd47fa04064ef8afabb38fbeecfcc3fc6e4e9f162094503cd58db5daa3630543170a0ddc649cdb6f2d858e8f95dcc102034ca8e1dfc1d57f35ab8054f
-
SSDEEP
12288:+nwGJzfvsTtQsIcYm7bQLBWx8gZCMly+FgqRBz8M3tkfci4KTbrVxoHkkXX:TJQBhm4LBW1ZCMly+aiBzV3t8rVGHV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/97504b3dbc2dfe20922f3323f905aa9d4f5f440720cab63dd26c82f26f7d76a2
Files
-
JaffaCakes118_19157045ecc10e0db37a1f84bf66614822f3256bb240f9ee1342295e37aa64a9.zip
Password: infected
-
97504b3dbc2dfe20922f3323f905aa9d4f5f440720cab63dd26c82f26f7d76a2.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 828KB - Virtual size: 827KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ