Behavioral task
behavioral1
Sample
Windows Loader.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Windows Loader.exe
Resource
win10v2004-20240709-en
General
-
Target
3725282b22cf78a38a79ca459536f48b_JaffaCakes118
-
Size
1.4MB
-
MD5
3725282b22cf78a38a79ca459536f48b
-
SHA1
968323afb08c051ca15eab6e93242cf1e5cbeb7a
-
SHA256
312cd97adb091dd6359cff3080b48a7f946eb043ee8f2e10376a156629b3a42c
-
SHA512
e4bde3c6e98db94a968255d9cdd5002fec41323ab2b320cc08c84832eb426d1665e84f1a61e4fdc5be1630766ddccfc5ec624b316d7ae55047792f439fda4804
-
SSDEEP
24576:2DQhePtVqWaoUGIqLtDDEzqrBds1TaCVCwuHZd8CqF18QhLsIwE5P+E/RXiFn:hk0iDEGfswrHZhqoQOIwEU0XiFn
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Windows Loader.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Windows Loader.exe
Files
-
3725282b22cf78a38a79ca459536f48b_JaffaCakes118.zip
-
Keys.ini
-
Read me.txt
-
Windows Loader.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 577KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE