Static task
static1
Behavioral task
behavioral1
Sample
www.free-ebooks-download.org-----Pass4sure 70-547.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
www.free-ebooks-download.org-----Pass4sure 70-547.exe
Resource
win10v2004-20241007-en
General
-
Target
44c504b3ca105a9563e1c252df8b8463_JaffaCakes118
-
Size
674KB
-
MD5
44c504b3ca105a9563e1c252df8b8463
-
SHA1
83b78e4c273b8be9818b1889a979c78de53315d7
-
SHA256
76da83a76fdacd8965ae58068063482afc3dc78979838048351badcc48e9ad35
-
SHA512
45be0962d7517b7d399091f7250ea17692ad24a3a7819563c7321ed7595cc8c8b2b18877cdff36cfb61275cfe8b3ade08de7bafa565177d5a918ad7fe3019d9d
-
SSDEEP
12288:VaDmM5ARQ/tsLBeUrrmxjGXPJXAv0cgGaWRdemSNDgStpZajfg4kgeL4:VaDwG0BBXxXe0cgtR1jtptfL4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/www.free-ebooks-download.org-----Pass4sure 70-547.exe
Files
-
44c504b3ca105a9563e1c252df8b8463_JaffaCakes118.zip
-
www.free-ebooks-download.org-----Pass4sure 70-547.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 670KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE