Behavioral task
behavioral1
Sample
WPA_PatcherV1.0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
WPA_PatcherV1.0.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
WPA_Patcher_Multilingual.exe
Resource
win7-20240708-en
General
-
Target
3e75e8b1db39e4b3ef9808e6a54b0cff_JaffaCakes118
-
Size
30KB
-
MD5
3e75e8b1db39e4b3ef9808e6a54b0cff
-
SHA1
46b352dea70ec50a121b343e585415da44315066
-
SHA256
722b7ad7daa41a13c853534a8a466d6003dde90b1ce476bc7bfbe6112e3e20cc
-
SHA512
4c293ac6739c7dfaf68c081aecea8d7aecdbea43fc109f764e04115d833fe517ab8c5480f88193253c70c2ffadf5b962b099bfe41aa1f4ab618d700113ff11fb
-
SSDEEP
768:pJ/fYFK1d0kW3ynATqX2fqvNYOt7ZwmDVVvjBCoGjOW7Vse:p1tQT3+YVOJ6m5VUL3Jse
Malware Config
Signatures
-
resource yara_rule static1/unpack001/WPA_PatcherV1.0.exe upx static1/unpack001/WPA_Patcher_Multilingual.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/WPA_PatcherV1.0.exe unpack001/WPA_Patcher_Multilingual.exe
Files
-
3e75e8b1db39e4b3ef9808e6a54b0cff_JaffaCakes118.zip
-
Readme.txt
-
WPA_PatcherV1.0.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
WPA_Patcher_Multilingual.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ