Static task
static1
Behavioral task
behavioral1
Sample
movie1080p.mkv.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
movie1080p.mkv.exe
Resource
win10v2004-20240802-en
General
-
Target
122ea170d93f69c6fd6e7fb10906575f_JaffaCakes118
-
Size
52KB
-
MD5
122ea170d93f69c6fd6e7fb10906575f
-
SHA1
c8f1e5a22ebc862e280059b357539d1eb07e6d85
-
SHA256
e08c19c7b723d5ac14d0f3f53279b50123ed9b2bd20de1fd6e36a15b2e1f7faf
-
SHA512
0b5f86468384f7856e507dc73f411b9b92d05c1fb709007d65f6e0524ba3d9dcec0b485eddd2735cf6e874cf58f57af88a3f939c1cd95f2a8ed30a57955f02a1
-
SSDEEP
768:0W6aYO8eXdS2ON2Vs8bqeAKJ77nfjT6ppKHz83gJnAigPo2yQGTDteNQ4NDkUwlc:n6A5ONDvKlnfv6eYyDtid+lIbeW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/movie1080p.mkv.exe
Files
-
122ea170d93f69c6fd6e7fb10906575f_JaffaCakes118.zip
-
movie1080p.mkv.zip.zip
-
movie1080p.mkv.exe.exe windows:4 windows x86 arch:x86
5318b6fae4fa5ae00ab15a97ba7d86c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LeaveCriticalSection
GetLocalTime
GetModuleHandleA
FindResourceA
FormatMessageW
GetCurrentDirectoryW
InitializeCriticalSection
ReadFile
lstrcpyA
GetLastError
lstrcatA
SetFileAttributesW
IsBadStringPtrW
CreateMutexW
SetFileTime
SetFileTime
GetStartupInfoW
HeapCreate
CloseHandle
GetFileSize
SetFileTime
msi
MsiCloseHandle
MsiAdvertiseProductA
MsiCreateRecord
MsiCloseAllHandles
user32
PeekMessageW
PostMessageW
SetFocus
GetWindowRect
LoadCursorW
GetWindowLongW
wsprintfW
GetWindowTextA
IsDialogMessageA
SetCursorPos
IsWindow
IsZoomed
DispatchMessageA
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1024B - Virtual size: 211B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE