Static task
static1
Behavioral task
behavioral1
Sample
ID.141474-736185174.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ID.141474-736185174.exe
Resource
win10v2004-20240508-en
General
-
Target
a3b6a0b4ed98a9531e588a254609ca4f_JaffaCakes118
-
Size
629KB
-
MD5
a3b6a0b4ed98a9531e588a254609ca4f
-
SHA1
c9d35a9be26ca0435776ba582def9f62321ffb01
-
SHA256
0160d3f764f5a640d67780530bdf74cea08b8f0d195f352badf85c2f6fe57c9b
-
SHA512
85f3dac4441d6924f290fd6422f89a02d215dd033eb1b5cea5e0d780513a654c5383308b004d3e3a9fa129e96ad869abac6bdf245a74c8b93d03b1607b3cf700
-
SSDEEP
12288:QcmD1g/bB0mc9lsiMhZjGHvmtBNmV0PlXszFhGjtYtL8srQ8uwvE:ED1S0Ds/sPcivG5YJ8oM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ID.141474-736185174.com
Files
-
a3b6a0b4ed98a9531e588a254609ca4f_JaffaCakes118.zip
-
ID.141474-736185174.com.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kdata Size: 661KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE