Static task
static1
Behavioral task
behavioral1
Sample
Lista_Participantes.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Lista_Participantes.exe
Resource
win10v2004-20240508-en
General
-
Target
9f5aa58982161ddcebfb00c9b5295acb_JaffaCakes118
-
Size
611KB
-
MD5
9f5aa58982161ddcebfb00c9b5295acb
-
SHA1
89f7f6cdefd79b6ab5d10af3183f183ab21c5d5e
-
SHA256
ce5fb224536bd55d3f4eded77803566176c29956185cad826f5cca9bb54e6d83
-
SHA512
1717421fa8d094e87ebac6d6034f46c7dd3ba8536dc6a96176432213c9d295f5f3a7ae32636d56c335ff22c20ffc46c14647be43453a3ce226e16dbda74745fb
-
SSDEEP
12288:jNoY0nBJYr5giCWnvZmE2v8DhOY3ECOeXwt/P9LelVtRPyv5:Zj0nvYr5CWvZmE2kbUCItH9LsVtR8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Lista_Participantes.exe
Files
-
9f5aa58982161ddcebfb00c9b5295acb_JaffaCakes118.rar
-
Lista_Participantes.exe.exe windows:5 windows x86 arch:x86
bff64006c8b788af08ed74843250f607
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
msimg32
AlphaBlend
gdi32
WidenPath
version
VerQueryValueW
mpr
WNetOpenEnumW
ole32
OleUninitialize
comctl32
InitializeFlatSB
wininet
InternetOpenUrlW
shell32
SHGetFileInfoW
comdlg32
ChooseColorW
winspool.drv
OpenPrinterW
shfolder
SHGetFolderPathW
Sections
.text Size: 598KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE