Static task
static1
Behavioral task
behavioral1
Sample
BF2_v1.50_Trn.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
BF2_v1.50_Trn.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Team DVT.url
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Team DVT.url
Resource
win10v2004-20240709-en
General
-
Target
7039a5d8c1ee5fd9f43feda6ad3b8968_JaffaCakes118
-
Size
115KB
-
MD5
7039a5d8c1ee5fd9f43feda6ad3b8968
-
SHA1
2ba03a5aaede53879be4c01d839598e2f2f14793
-
SHA256
58037ae3e0260a3abb5ffea9adc0861a99637e3ee020e92130c180827a9f0629
-
SHA512
8d1830ddeb326764fb7dd9c6661abcdbd09e7fa78a67d655f5b8fe133776c8e0541f85ec5bcb10416efcbcccfb6c0b7d0a73cd06d78196ca1de4d56dcc05345f
-
SSDEEP
3072:+x39pUy+JAzKfEdjlJkzFzdlSJiRq9KKeGPGydYn3:+R9pR+CmfijuplrpzGPEn3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BF2_v1.50_Trn.exe
Files
-
7039a5d8c1ee5fd9f43feda6ad3b8968_JaffaCakes118.rar
-
BF2_v1.50_Trn.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
DEViATED Size: 512B - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DEViATED Size: 116KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
DEViATED.nfo
-
Team DVT.url.url