Static task
static1
Behavioral task
behavioral1
Sample
Abrechnung-86-478524-6687550368775-18298490121.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Abrechnung-86-478524-6687550368775-18298490121.exe
Resource
win10v2004-20240508-en
General
-
Target
b2d02721d8e3e80b8bb1f7cf2d1a5e78_JaffaCakes118
-
Size
621KB
-
MD5
b2d02721d8e3e80b8bb1f7cf2d1a5e78
-
SHA1
a94cb93258d46faf100ef3eede9af5ae3ec3abb7
-
SHA256
0f5b97dc2906c10d8a5517bad41e7950358c12594f3fd4c38f59f16800b47560
-
SHA512
347bdc4679fd353c0451608274db6586ba827275677e281b286ff3614ced31b871a64bb2cf0b0a5da3222e7c09b76de5f8a5e55bf68578650d44229c3450d578
-
SSDEEP
12288:E/OnD1Mqvi/ak8sZWt419WYCZEWY3ELhsJkSwPxbCcCfrnBf2:EmnxMGMVXWt4fROE2LhsmSw5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Abrechnung-86-478524-6687550368775-18298490121.com
Files
-
b2d02721d8e3e80b8bb1f7cf2d1a5e78_JaffaCakes118.zip
-
Abrechnung-86-478524-6687550368775-18298490121.com.exe windows:5 windows x86 arch:x86
a8526b0f477583b2f8a7d93a03819a10
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rsaenh
CPDeriveKey
CPCreateHash
CPEncrypt
CPDecrypt
CPGenKey
kernel32
Sleep
GetConsoleTitleW
IsBadStringPtrW
GetModuleHandleA
FindResourceA
CreateProcessW
GetTickCount
lstrcpynW
SearchPathW
GetLongPathNameA
OpenEventW
CreateFileW
CreateProcessW
SetSystemTime
GetProcAddress
UnmapViewOfFile
AllocConsole
GetCurrentThread
HeapAlloc
Sections
.text Size: 632KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hml Size: 3KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ