Static task
static1
Behavioral task
behavioral1
Sample
A-Patch143b12.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
A-Patch143b12.exe
Resource
win10v2004-20240802-en
General
-
Target
8c1bd7d6f254ad6ade3ad3ea70d3de8f_JaffaCakes118
-
Size
186KB
-
MD5
8c1bd7d6f254ad6ade3ad3ea70d3de8f
-
SHA1
991f89d054afb4f4c962d48d7318db17ec482170
-
SHA256
5881d2009d891d27191a9ca972350209aab1f3a48427c8b97349f814d2b3175b
-
SHA512
897d25e796fbc27e903645fce39277a0514cdd142be4de88df561cb94ad803fff8360f4a5e51aa5c7e8bb335b0a9d9f0ba05a18397ab8d2bc02665d705d04a56
-
SSDEEP
3072:LbYI3E1QVb0lJnEcmKgfPyg3I6xXjdA6uj5SMG27l+wtu54unYQgFeFGs:LbYI8QVQlJnE6gfqg4ijK6tC+wU54unJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/A-Patch143b12.exe
Files
-
8c1bd7d6f254ad6ade3ad3ea70d3de8f_JaffaCakes118.zip
-
A-Patch143b12.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 175KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE