Behavioral task
behavioral1
Sample
JaffaCakes118_4f1e9111886880f2a0a1c983474db2798c5c068a769f62a801648aeede4c1867.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4f1e9111886880f2a0a1c983474db2798c5c068a769f62a801648aeede4c1867.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_4f1e9111886880f2a0a1c983474db2798c5c068a769f62a801648aeede4c1867
-
Size
232KB
-
MD5
c9b2abb8919653fbba8ed398ba1d58b7
-
SHA1
1a9c8a72f41a679dfb8fc8c61b7b707bd7286719
-
SHA256
4f1e9111886880f2a0a1c983474db2798c5c068a769f62a801648aeede4c1867
-
SHA512
85df85db704769d9ffee5d402af4e10634d20bebd3a5b655d47ca648907b194b24325c77ac9b7b62d0a6ff5826f7c33a8b378fc96d56b3bc651ec0e62b245038
-
SSDEEP
3072:K40JIlNm6VrbvrAmmxIWxFvLgqQtUCh4DD/eUn0S5XdMoxHGoCCWnq:KDJilboIOVsUCh4DD/TnFv1Ch
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_4f1e9111886880f2a0a1c983474db2798c5c068a769f62a801648aeede4c1867
Files
-
JaffaCakes118_4f1e9111886880f2a0a1c983474db2798c5c068a769f62a801648aeede4c1867.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ