Static task
static1
Behavioral task
behavioral1
Sample
ssssss.exe
Resource
win7-20240508-en
General
-
Target
3bca962635a9f7486aafee1763e771a4_JaffaCakes118
-
Size
299KB
-
MD5
3bca962635a9f7486aafee1763e771a4
-
SHA1
f2a67e7f88c82f4380fa334cab924e7624617c0e
-
SHA256
103ba9cccbdd7522730b2bebef111391cc421350ccab37738e7aa9c582b6a1ba
-
SHA512
3d1a401cc68bcd335464e53def27c98200bf38ff4de5cc3d9f9ba884bff906ae37cfb217569573631377b2340e1a59fdcefd20bd816a1857cc108c5655eb5404
-
SSDEEP
6144:rJz0YsiURd3Nof1u1mWhsGZTMEFQ0jUYgQtgm42xBdDQI29mCMaZ1O1zXSG:VDsb3GfUl1a0jcEW2xJ2pMarO1zXSG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ssssss.exe
Files
-
3bca962635a9f7486aafee1763e771a4_JaffaCakes118.rar
-
ssssss.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 378KB - Virtual size: 377KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ