Overview
overview
3Static
static
3SublimeTex...ans.py
windows7-x64
3SublimeTex...ans.py
windows10-2004-x64
3SublimeTex...ed.exe
windows7-x64
1SublimeTex...ed.exe
windows10-2004-x64
1SublimeTex...t__.py
windows7-x64
3SublimeTex...t__.py
windows10-2004-x64
3SublimeTex...ngs.py
windows7-x64
3SublimeTex...ngs.py
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
SublimeTextTrans-1.4.0/SublimeTrans.py
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SublimeTextTrans-1.4.0/SublimeTrans.py
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
SublimeTextTrans-1.4.0/lib/SetSublimeLayered.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
SublimeTextTrans-1.4.0/lib/SetSublimeLayered.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
SublimeTextTrans-1.4.0/transparency/commands/__init__.py
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
SublimeTextTrans-1.4.0/transparency/commands/__init__.py
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
SublimeTextTrans-1.4.0/transparency/commands/settings.py
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
SublimeTextTrans-1.4.0/transparency/commands/settings.py
Resource
win10v2004-20240426-en
General
-
Target
709262435e19c51207d07bb99c3f96de_JaffaCakes118
-
Size
130KB
-
MD5
709262435e19c51207d07bb99c3f96de
-
SHA1
df16cf9899035f0035048fd0e8b552192f4db8ff
-
SHA256
f423eae4c73925abcd5b5512280d99f8e6be97e18ccd3503d5c2cc2fa594694c
-
SHA512
52a0e504d0ce2b42fac1c496b64cf01614610d7240fe3a4bd302c8b00349aca9685da741b0f03eb9f165973852eba589237a0baf36cb0f5aad12b8f6dede7c57
-
SSDEEP
3072:ykzqz3Cgi8stZPogn5IoLyMQ0gHdafwIks3N+Gnn41ewdC:5Wz3CgxstJognuoLyMf0q7B3Ntnn417C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SublimeTextTrans-1.4.0/lib/SetSublimeLayered.exe
Files
-
709262435e19c51207d07bb99c3f96de_JaffaCakes118.zip
-
SublimeTextTrans-1.4.0/.gitattributes
-
SublimeTextTrans-1.4.0/.gitignore
-
SublimeTextTrans-1.4.0/Context.sublime-menu
-
SublimeTextTrans-1.4.0/Default (Windows).sublime-keymap
-
SublimeTextTrans-1.4.0/LICENSE
-
SublimeTextTrans-1.4.0/Main.sublime-menu
-
SublimeTextTrans-1.4.0/Readme.md
-
SublimeTextTrans-1.4.0/SublimeTextTrans.message
-
SublimeTextTrans-1.4.0/SublimeTextTrans.sublime-settings
-
SublimeTextTrans-1.4.0/SublimeTrans.py
-
SublimeTextTrans-1.4.0/lib/SetSublimeLayered.asm
-
SublimeTextTrans-1.4.0/lib/SetSublimeLayered.exe.exe windows:1 windows x86 arch:x86
1913b601fda412a1c6d364c092ad5c8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
msvcrt
__getmainargs
printf
atoi
user32
SetWindowLongA
Sections
.flat Size: 512B - Virtual size: 406B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
SublimeTextTrans-1.4.0/messages/install.txt
-
SublimeTextTrans-1.4.0/snapshot.png.png
-
SublimeTextTrans-1.4.0/transparency/commands/__init__.py
-
SublimeTextTrans-1.4.0/transparency/commands/settings.py