Static task
static1
Behavioral task
behavioral1
Sample
419000b66f04ce0f9b5b3b9f4825d4b68d21df27e99d02b483bd96aa240413d7.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_c548170eee396cd9ffc197fb13bf8fcfc38c9098c56e8eff3548883f4fdccfb9
-
Size
562KB
-
MD5
7feea41df3487f3ebcb7626b1cfb5489
-
SHA1
1954a3e7a2b77807743f44393ded9a545d9cf364
-
SHA256
c548170eee396cd9ffc197fb13bf8fcfc38c9098c56e8eff3548883f4fdccfb9
-
SHA512
340d6fa611bb5a1c056f81499059fd47d077a40f4b8f6350d9e51467d57eff3047002ad9b103fe806853a8db5b727367f5c059c8092ea3c09b62cd4ce5bb7f91
-
SSDEEP
12288:3b9X6E97eNRqz3kt6rpScWv74/JvlCYSQwY43JjjgGY0lUSggpyzt:Z6E9atYpSZWvloQZ43JjFfg2W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/419000b66f04ce0f9b5b3b9f4825d4b68d21df27e99d02b483bd96aa240413d7
Files
-
JaffaCakes118_c548170eee396cd9ffc197fb13bf8fcfc38c9098c56e8eff3548883f4fdccfb9.zip
Password: infected
-
419000b66f04ce0f9b5b3b9f4825d4b68d21df27e99d02b483bd96aa240413d7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
v`X(% Size: 522KB - Virtual size: 521KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ