Static task
static1
Behavioral task
behavioral1
Sample
TR_MMX8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
TR_MMX8.exe
Resource
win10v2004-20240802-en
General
-
Target
0fa93c3f9c81dae78a6605e4c0aa1af6_JaffaCakes118
-
Size
26KB
-
MD5
0fa93c3f9c81dae78a6605e4c0aa1af6
-
SHA1
ee3190c35fe3dc5fbe1911931679acba943cc117
-
SHA256
76787b1d04628c33158e2c2da234b1f4e28d9d030f18806a9edade9b1f0b72eb
-
SHA512
9e78599544a115b68217c14b6cd19b26be10ea57597f1da263adac085afe5742b870abc13a9bd29be2815b20c9716b71e97863f851eea816a5e692413100c086
-
SSDEEP
384:Yi5J6+Q2YgUtw4hqnZm9VYPjrEI9tsDWGLnHr0lb7jZ8aQBVCbv+pnj3gWvcNUNR:YDNw4hQm9VYPN9jeHoFhvYj3FvcNUN7d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/TR_MMX8.exe
Files
-
0fa93c3f9c81dae78a6605e4c0aa1af6_JaffaCakes118.rar
-
TR_MMX8.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 20KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
TR_MMX8.nfo