Static task
static1
Behavioral task
behavioral1
Sample
Wedding_Invitation.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Wedding_Invitation.exe
Resource
win10v2004-20240802-en
General
-
Target
95768346a9d6c91278e74fb1844f2141_JaffaCakes118
-
Size
2.2MB
-
MD5
95768346a9d6c91278e74fb1844f2141
-
SHA1
e031b1d30c0ebbf8fae0cdb197f718863f47caf1
-
SHA256
595986f5bd461aee0747b6dc2e9c9dda027bd4842a2676ccd8a3c5efab0a9a8f
-
SHA512
6b8f6491bc26b1940cc7b8baf215c7651d6b827f28c80130ea68dfe9d131d0bc4f20d8c1fecf7b8562c025b54a7d852e41c5f99ce051d9339ee0580465d2f308
-
SSDEEP
49152:mPx+jrR6aHgHI7ZFmRY7h9QtJ5SfvKZXNkZ0QcBRM6JMY4JEv1Jncw:mp+jFBHgHI7+Y9eJ5Saf5nfM6+Y7jnF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Wedding_Invitation.exe
Files
-
95768346a9d6c91278e74fb1844f2141_JaffaCakes118.rar
-
AutoPlay/Audio/Click1.ogg
-
AutoPlay/Audio/High1.ogg
-
AutoPlay/Buttons/10_1339.btn.zip
-
10_1339_disabled.png.png
-
10_1339_down.png.png
-
10_1339_normal.png.png
-
10_1339_over.png.png
-
_manifest.xml
-
AutoPlay/Buttons/18_879.btn.zip
-
18_879_disabled.png.png
-
18_879_down.png.png
-
18_879_normal.png.png
-
18_879_over.png.png
-
_manifest.xml
-
AutoPlay/Buttons/1_623.btn.zip
-
1_623_disabled.png.png
-
1_623_down.png.png
-
1_623_normal.png.png
-
1_623_over.png.png
-
_manifest.xml
-
AutoPlay/Buttons/28_623.btn.zip
-
28_623_disabled.png.png
-
28_623_down.png.png
-
28_623_normal.png.png
-
28_623_over.png.png
-
_manifest.xml
-
AutoPlay/Buttons/3_623.btn.zip
-
3_623_disabled.png.png
-
3_623_down.png.png
-
3_623_normal.png.png
-
3_623_over.png.png
-
_manifest.xml
-
AutoPlay/Buttons/49_623.btn.zip
-
49_623_disabled.png.png
-
49_623_down.png.png
-
49_623_normal.png.png
-
49_623_over.png.png
-
_manifest.xml
-
AutoPlay/Buttons/button.btn.zip
-
_manifest.xml
-
button.png.png
-
button2.png.png
-
button3.png.png
-
button4.png.png
-
AutoPlay/Buttons/green_pill.btn.zip
-
_manifest.xml
-
disabled.png.png
-
down.png.png
-
over.png.png
-
up.png.png
-
AutoPlay/Images/Image0025.jpg.jpg
-
AutoPlay/Images/Map Bale_2.jpg.jpg
-
AutoPlay/Images/Thumbs.db
-
AutoPlay/Images/alter_02blue_alt.jpg.jpg
-
AutoPlay/Images/w014.jpg.jpg
-
AutoPlay/Images/w028.jpg.jpg
-
AutoPlay/Wedding_Invitation.cdd.zip
-
Franki&Febri.ico
-
Wedding_Invitation.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 1.0MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE