Static task
static1
Behavioral task
behavioral1
Sample
Patch.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Patch.exe
Resource
win10v2004-20240419-en
General
-
Target
07d85fdb5ac0d29da5ff197828d2845a_JaffaCakes118
-
Size
65KB
-
MD5
07d85fdb5ac0d29da5ff197828d2845a
-
SHA1
64159f83f924a02f96a73f5c6b0e43e3b52952ff
-
SHA256
fdf4bfdfe537756a86b114e300cb33513675ca30c9317aa6e62bc754a92b32a6
-
SHA512
c25b26c80a5f655171caaf0c376310ae35c1db88758d87d4455c4c7e686d058a3a3273bc0b26d4bd9232dbdf22a6d13f42e9f4b78f7f875224acd16dec84177d
-
SSDEEP
1536:0m5eUgun2EeRCzBS4yX2lFFgiYz4OSQdftqHGMTzSRwiAQnKNWV4eb:0mF4EPU4nlQ7XdFqHGBnOq4eb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Patch.exe
Files
-
07d85fdb5ac0d29da5ff197828d2845a_JaffaCakes118.zip
-
crack.zip.zip
-
Patch.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
TBE Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TBE Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
set.ini
-
file_id.diz
-
keygen.nfo
-
tbe.nfo