Static task
static1
Behavioral task
behavioral1
Sample
mw3n4_all_bie.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
mw3n4_all_bie.exe
Resource
win10v2004-20240508-en
General
-
Target
00ab08685f5f49a72f2e473c897ed578_JaffaCakes118
-
Size
60KB
-
MD5
00ab08685f5f49a72f2e473c897ed578
-
SHA1
b44917e7f759954492a9dae95586052762dee29a
-
SHA256
b0741d693cc0d4dd2c8aff7267e26295bac94e6bd217291ef33237f55932d835
-
SHA512
9a8d04586e13475215b52f5c0fd624f5ea6a0e622b31b9245d7ec2257617f6754bb265dce9f98a1dfee732445037cdae588489aaf6a65f1c700f7606eb390c88
-
SSDEEP
1536:S1DzJ4+EOVQ9jipL6kwYJFfN50eKl4fzzQSMvKBkWfsAdKVbxA:S1HDNgiokHDfUyzGQkusAdcVA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/mw3n4_all_bie.exe
Files
-
00ab08685f5f49a72f2e473c897ed578_JaffaCakes118.zip
-
cheaters-heaven.gif.gif
-
cheaters-heaven.nfo
-
mw3n4_all_bie.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
����t Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
readme.txt