Static task
static1
Behavioral task
behavioral1
Sample
Андерсен. Дюймовочка и мышь.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Андерсен. Дюймовочка и мышь.exe
Resource
win10v2004-20240419-en
General
-
Target
038445bd16a0310982b700cbca3fc3f7_JaffaCakes118
-
Size
712KB
-
MD5
038445bd16a0310982b700cbca3fc3f7
-
SHA1
b91ffa7af6eaa4cfe14c5135101ac134cfdb7b3b
-
SHA256
ab52df4c0548289d565eed378de7a366104b5138d98258842ca3911f16e74be3
-
SHA512
aaec8dde2f22e2e6993131a158e77223ae0edbcfa727dad709369eaffda5a6fa99f7431e65286f6e8132fed3ecc31137180358a6e027faf6600888cb6ff6abde
-
SSDEEP
12288:r9RqPzd9nTnM2PAGq3Qvq1j/h3xBsaZH/SKz4IuOhAoEJcFksYamOwqD4puU:7qPBVM2PAV3QkjhjsaB7tSoEJcFHYcwD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Андерсен. Дюймовочка и мышь.exe
Files
-
038445bd16a0310982b700cbca3fc3f7_JaffaCakes118.rar
-
Андерсен. Дюймовочка и мышь.exe.exe windows:4 windows x86 arch:x86
4c98f32b1af06f2deb4a2530e30517dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imagehlp
MapFileAndCheckSumA
shlwapi
PathCombineA
PathFindExtensionA
PathAppendA
PathRemoveExtensionA
PathStripPathA
kernel32
GetLastError
GetCommandLineA
GetModuleHandleA
ExitProcess
lstrcmpiA
lstrcpyA
lstrlenA
HeapAlloc
GetProcessHeap
HeapFree
RemoveDirectoryA
WaitForSingleObject
CreateProcessA
CloseHandle
GetFileAttributesA
lstrcatA
DeleteFileA
SetFilePointer
CreateFileA
CreateDirectoryA
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
GetACP
ReadFile
GetTempFileNameA
GetTempPathA
WriteFile
user32
wsprintfA
SetDlgItemTextA
DestroyWindow
CreateDialogParamA
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
PeekMessageA
SendDlgItemMessageA
MessageBoxA
SetWindowTextA
shell32
SHFileOperationA
comctl32
InitCommonControlsEx
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ