Static task
static1
Behavioral task
behavioral1
Sample
identificazione.Pdf__________________________________________________________________.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
identificazione.Pdf__________________________________________________________________.exe
Resource
win10v2004-20240611-en
General
-
Target
1c7343b5aa5f09c5ccf8a27f456a4930_JaffaCakes118
-
Size
185KB
-
MD5
1c7343b5aa5f09c5ccf8a27f456a4930
-
SHA1
5caf30ffdecaea78dcccfcacb59d5e219b75644a
-
SHA256
73aef8e5b193c669537442ce1b1a92d58119afcfd416c57cbe8903fdb17aeb9c
-
SHA512
4e9f66df8116945d2953b54530b800578d15a6c0859ab7ae772b9df79a3f740a4d98e1b122ef52488aeaa23c6b445aaba015ad9a88f6af341c028fd364559a1b
-
SSDEEP
3072:qSR7ES1uWwGjH1iEQRru/GPyG58pef21YxP7gNheo2C9b20uv/hTXJijVr:D1pwWUEQ4u98oOixPENN2guvZTXeVr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/identificazione.Pdf__________________________________________________________________.exe
Files
-
1c7343b5aa5f09c5ccf8a27f456a4930_JaffaCakes118.zip
-
identificazione.Pdf__________________________________________________________________.exe.exe windows:5 windows x86 arch:x86
de9be4e300f7ce4258f18d64a5d440c1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
GetTickCount
VirtualProtect
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ