Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20240508-en
General
-
Target
40625209115aac15461c9c36ecbd7a39_JaffaCakes118
-
Size
128KB
-
MD5
40625209115aac15461c9c36ecbd7a39
-
SHA1
564ef8a5842b1433eaa810c7c8af8de54fc0fa5b
-
SHA256
fb307107e9c93a452d5c15e211012a3f91ecfb0ab9e8eb9ad841449394a207e3
-
SHA512
c7e93730f1a130c8af39bbaa304a9d54ea77d3888e42a00aea53f984fc376506a9e4a5136906e1a0df808b7775a4e8f27d5b2bf92ba123e5554819bcf9eee132
-
SSDEEP
3072:fRASdVB4Bwh2ON5rZhj5h/GY9BCdfdvF/po8szV00dTC:lVag2Ozzj5IYQhpo8szvdTC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/setup.exe
Files
-
40625209115aac15461c9c36ecbd7a39_JaffaCakes118.rar
-
setup.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 218KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ