Static task
static1
Behavioral task
behavioral1
Sample
Scrmaker.exe
Resource
win7-20240705-en
General
-
Target
8793da9ded79951de7f3b401b437cdb3_JaffaCakes118
-
Size
1.6MB
-
MD5
8793da9ded79951de7f3b401b437cdb3
-
SHA1
b1bdfe6b3dc39daa45be28cdd1fa703633d45162
-
SHA256
97ad0a77a4f2a9f458a3c1eb37ea650e03e98ea111456ca7b493b0e965b04a08
-
SHA512
2d0b563d7c7cfca82c140637c52352fc266ab194156cab9bf2ab77d6882721dba687c8d923e7a19031594bb8f18db478f3ae9b498313458a4fb2c2f2ef439770
-
SSDEEP
49152:BwYXgdJAv5G3DWREHrnsFpk/9SQ5u9GNbmz0eRvuI:xuAEaaHrns8/9f0wbm0LI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Scrmaker.exe
Files
-
8793da9ded79951de7f3b401b437cdb3_JaffaCakes118.rar
-
README.TXT
-
Scrmaker.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: 125B - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 932KB - Virtual size: 939KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
下载说明.htm.html .js polyglot