Static task
static1
Behavioral task
behavioral1
Sample
GEN.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
GEN.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral3
Sample
TEST.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
TEST.exe
Resource
win10v2004-20240730-en
General
-
Target
833759f11e310a380e199ad37b2e1cf5_JaffaCakes118
-
Size
4KB
-
MD5
833759f11e310a380e199ad37b2e1cf5
-
SHA1
bccd76675ffbaefe263abef43eede048a4dbb40b
-
SHA256
8bc57ac6044bf8da09c7bc0d075a4f4709a02f88711901361b123a8d7ba5a9cc
-
SHA512
2898158f7653f2e1783ec72c9367b040f62a81eb5a04673f4eec3f9c42dc5ddc21c588884efe3a6525424f96f281d6095a1f29b447c87c11f4572e78c5b837d7
-
SSDEEP
96:P/C6bZOZmKGxOtSvGoaf5/k5a3atgikbU+yw5d6AVwFLatM6W3d85Luuua:ZemK5SJg5uDkbU+xhKhMYEh
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/GEN.EXE unpack001/TEST.EXE
Files
-
833759f11e310a380e199ad37b2e1cf5_JaffaCakes118.zip
-
FILE.DIZ
-
GEN.EXE.exe windows:1 windows x86 arch:x86
6d07e061abbaf1bd96ab4e1338621b15
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateFileA
CloseHandle
GetTickCount
VirtualAlloc
WriteFile
ExitProcess
user32
MessageBoxA
Sections
CODE Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
MME.OBJ
-
TEST.ASM
-
TEST.EXE.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ