Static task
static1
Behavioral task
behavioral1
Sample
K+ calculator.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
K+ calculator.exe
Resource
win10v2004-20240802-en
General
-
Target
06573d144460189d84bd533c71b41c96_JaffaCakes118
-
Size
9KB
-
MD5
06573d144460189d84bd533c71b41c96
-
SHA1
b0358c2761a27f41fb5c75f6ba0657478d68c30a
-
SHA256
03296422387730892d80ba9d4f77e4357e5ff6578fe54d03af2b6a6ac94cf587
-
SHA512
473158a46879e47687bdcf3a5ccb4c486f02cd451b80e57fd46e74427366873e8f1d432e2cf283e3d255458993e783388845249b51eec7b0be4b1c7a908fd477
-
SSDEEP
192:9hpdL0jLWSKHjuY9vUXyOe/VgFLhGwDvMano6Ry4TZaa38qp1:lnuZr4gLhGwDpo600ae8I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/K+ calculator.exe
Files
-
06573d144460189d84bd533c71b41c96_JaffaCakes118.rar
-
K+ calculator.exe.exe windows:4 windows x86 arch:x86
2f64e6f637cc5322595894d4b9416c6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DialogBoxParamA
SetTimer
SetDlgItemInt
LoadIconA
EnableWindow
GetDlgItem
SendDlgItemMessageA
MessageBoxIndirectA
CheckDlgButton
IsDlgButtonChecked
DestroyWindow
KillTimer
SetWindowLongA
GetWindowLongA
SendMessageA
GetDlgItemInt
wsprintfA
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
readme.txt