Static task
static1
Behavioral task
behavioral1
Sample
CetakNotaSMS.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
CetakNotaSMS.exe
Resource
win10v2004-20240426-en
General
-
Target
6488639c3725de2a37449f7aab1d674a_JaffaCakes118
-
Size
69KB
-
MD5
6488639c3725de2a37449f7aab1d674a
-
SHA1
6282f982c8325d5f01ce933d7210c283d09fe2d1
-
SHA256
bed8d7b9bdef22ff1b9b9fb54db845f0198a68fa3716e8bb2641ec588f9a9c37
-
SHA512
40f9a501a855c1bcbd675ec359995e6123c8e1a1ab87d05fc3c3009c8f3fd15e7f5de7b5ffb384ced05c683191cf30b39691cd2a8aa6925ad953125b06027483
-
SSDEEP
1536:7av2sxnO7PXKzKfILzIro4Ykj5nf0RU+qPfo:+unP1IL8ikNnehqPfo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CetakNotaSMS.exe
Files
-
6488639c3725de2a37449f7aab1d674a_JaffaCakes118.rar
-
CetakNotaSMS.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
printer.txt