Static task
static1
Behavioral task
behavioral1
Sample
israeli cheat 69.5.1.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
israeli cheat 69.5.1.exe
Resource
win10v2004-20240508-en
General
-
Target
89b500377fba5fd71e8406874f2e8838_JaffaCakes118
-
Size
9KB
-
MD5
89b500377fba5fd71e8406874f2e8838
-
SHA1
c4ce776dae8390cd4e62e38b032f42998a65a79c
-
SHA256
95499d575ff8386c40eb868429c0d50eaa3b60b2fa37f4c493147d0b505b3cb4
-
SHA512
df9c42ad0333819330da406e118d3824c01158b7aec748a645314d8494023707118ef06ba12344b64f64f878171835a165bc0fdb3cf5f5a7394c5dc5ed627c13
-
SSDEEP
192:+VK3YEFb1YHr6DNB8UcGfkdod9SwHI/DYW0wh9G/OzxJ8dIaJ:+GJ1JFcsqod9S//RhJ8CaJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/israeli cheat 69.5.1.exe
Files
-
89b500377fba5fd71e8406874f2e8838_JaffaCakes118.rar
-
israeli cheat 69.5.1.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ