Static task
static1
Behavioral task
behavioral1
Sample
server.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
server.exe
Resource
win10v2004-20240802-en
General
-
Target
0745fd8fe6c0c13db836c5a24f1c36a1_JaffaCakes118
-
Size
808KB
-
MD5
0745fd8fe6c0c13db836c5a24f1c36a1
-
SHA1
348cd68f4903e9cc2c033f431c581f5efd54d462
-
SHA256
3392f9c3927af4b29b77b8811ce69360f5ca23196d5f70fa195430f583f10d65
-
SHA512
9141deaf7fedb2d9165f78498e71dba2357fc60e7c16d45eef8b9b768975a0543ad0b1240927a9827376ef7bc3e875a8e998703988a3c21cdcc2de67edd0b2de
-
SSDEEP
24576:2g4R1bYoRhMn1TnxNqS4B8QazRFoRe41QO0Hf7:2NFJRAxNqSb9noDQFf7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/server.exe
Files
-
0745fd8fe6c0c13db836c5a24f1c36a1_JaffaCakes118.rar
-
Koala.jpg.jpg
-
server.exe.exe windows:4 windows x86 arch:x86
ff3357c629adaa00f6f0d86be23f113e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
GetFileTime
CopyFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleA
GetProcessHeap
ResumeThread
GetPriorityClass
OpenProcess
VirtualAlloc
VirtualFree
GetCurrentProcessId
SetLastError
CreateRemoteThread
GetProcAddress
FreeLibrary
GetVersionExA
GlobalMemoryStatus
CloseHandle
user32
CharLowerA
advapi32
OpenProcessToken
LookupPrivilegeValueA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE