Static task
static1
Behavioral task
behavioral1
Sample
iPad+TV1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
iPad+TV1.exe
Resource
win10v2004-20240508-en
General
-
Target
71e6d8eff3044073f2fa6c11a20b4568_JaffaCakes118
-
Size
1.2MB
-
MD5
71e6d8eff3044073f2fa6c11a20b4568
-
SHA1
f92fda9da59f4a476534224808634df5214a2fa9
-
SHA256
7b75ef6c4ae7bff823c06bb8b391f8c226ddea87323835276b89f3b0ac82cba5
-
SHA512
eafbf6921a9ad5a8b4595f708c6ee4fb018d4e632bdfeee8d898ee46d697788264e382374565eadaf5312ab3ca7bf1900df39a818a0f80b739b8a029fb82386b
-
SSDEEP
24576:38LreoFFvQ+5GQCkoNz8thCSoH7ifm6yTGv+8MgX5bn0deNNS+l/ogzHw+:38LrFJQgGQCz8jdcSmNTGGcX5LaeTl/r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/iPad+TV1.exe
Files
-
71e6d8eff3044073f2fa6c11a20b4568_JaffaCakes118.rar
-
iPad+TV1.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 432KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE