Static task
static1
Behavioral task
behavioral1
Sample
BIGMAN~1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
BIGMAN~1.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
WR-1-1~1.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
WR-1-1~1.exe
Resource
win10v2004-20241007-en
General
-
Target
3bda0661902a530a3b6c2f2652c80823_JaffaCakes118
-
Size
12KB
-
MD5
3bda0661902a530a3b6c2f2652c80823
-
SHA1
9a327afad4dfee4ebf34074d47301916133becd0
-
SHA256
a887ca77e492f24614c0a547d3deb18daa93406cdab98973f4e195af8a8191b4
-
SHA512
154f261f9eb1c297e2821543fa1b9289d40d0438d769609993a63b4af93c45de6d66951573b3e93fd10f6ad4a9b87fe68fa9dc4f7dd439fcde4170db5a2d356f
-
SSDEEP
384:6JELfQdAz51Vjbn3oZtWypi7IOCkpLr/OIBt+0tW8/Z+omlU:6qbQd+51xn3otpisYLrmR0tW8R+TlU
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/BIGMAN~1.EXE unpack001/WR-1-1~1.EXE
Files
-
3bda0661902a530a3b6c2f2652c80823_JaffaCakes118.cab
-
BIGMAN~1.EXE.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
WR-1-1~1.EXE.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
WSrT Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WSrT Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE