Static task
static1
Behavioral task
behavioral1
Sample
卡布奇诺V1.9c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
卡布奇诺V1.9c.exe
Resource
win10v2004-20240802-en
General
-
Target
d33d56891c91319af6bc649b5e4d5bfe_JaffaCakes118
-
Size
2.2MB
-
MD5
d33d56891c91319af6bc649b5e4d5bfe
-
SHA1
275d7d6f0f869d6fa336b1a57e0c2ae304d5f9c3
-
SHA256
d19d0d99c60c6ae09e1c73bc4aad65488073a881e79b6d0a8c9b6b7f0863800b
-
SHA512
5e16b03e8cd6bfcf0b1c39bcbe51c0ff324b38c1597ab0ac9b648362e06e2b5345194d274754f724fe4cce10fa62aabb7fe04b4e02c4581d378943b747bdec74
-
SSDEEP
49152:kILxY32TDQESNzyY62ugRagh4qW/03lMkg1pFcnU82p7FadmzE:fLs2QEpY6/K4qWc1gPp7FC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/卡布奇诺V1.9c.exe
Files
-
d33d56891c91319af6bc649b5e4d5bfe_JaffaCakes118.rar
-
卡布奇诺V1.9c.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
教學~.txt