Behavioral task
behavioral1
Sample
JaffaCakes118_0643b6cf56225f8f8c4c47b1acbb7ed0.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_0643b6cf56225f8f8c4c47b1acbb7ed0
-
Size
63KB
-
MD5
0643b6cf56225f8f8c4c47b1acbb7ed0
-
SHA1
8ccf445f42e0ba98c9596b74737f2b361a0e97c9
-
SHA256
7f8b94ceb0632ab76c876e9c86cf73317924e6deda8f5e29238e9d3af575bcd3
-
SHA512
49a0d7283edbc1eb53f53593e44eaa19d84dacfd4736855d285fe9920dd995617b13a38f9bb25c1c96b6398268474763d7a0e784343933e1860c87b28330e9a1
-
SSDEEP
768:C+o4uGiWUkqzIsv/docy6n0LeJbZ3r9/TiEXD4fddzG1iwPp7MFU:C+tU3Q6BbZ7BTiEXD8zWiwPiF
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0643b6cf56225f8f8c4c47b1acbb7ed0
Files
-
JaffaCakes118_0643b6cf56225f8f8c4c47b1acbb7ed0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ