Static task
static1
Behavioral task
behavioral1
Sample
P.3392316367804A8.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
P.3392316367804A8.exe
Resource
win10v2004-20240910-en
General
-
Target
d9872a8a729c2fe5b3c1c05f4825d606_JaffaCakes118
-
Size
629KB
-
MD5
d9872a8a729c2fe5b3c1c05f4825d606
-
SHA1
18a9fb898eb333fd03a6cf75c390a38c83b8b391
-
SHA256
ed955e69282fe4f4296de4cba1e003c8459aa5ee0c1c5eedca7670baf033a4f5
-
SHA512
99acfb16fd3c7b6094bc902e36254c39618785e5fa558fa77042a76ea452dbc2d968627896bd8b5c6b6517b65bde79b275e5b2d90942dba99d5ba77ce06e0e1c
-
SSDEEP
12288:VcmD1g/bB0mc9lsiMhZjGHvmtBNmV0PlXszFhGjtYtL8srQ8uwv7:JD1S0Ds/sPcivG5YJ8oT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/P.3392316367804A8.com
Files
-
d9872a8a729c2fe5b3c1c05f4825d606_JaffaCakes118.zip
-
P.3392316367804A8.com.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kdata Size: 661KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE