Static task
static1
Behavioral task
behavioral1
Sample
movie1080p.mkv.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
movie1080p.mkv.exe
Resource
win10v2004-20241007-en
General
-
Target
54907e053489dbec6c418507ea95497e_JaffaCakes118
-
Size
47KB
-
MD5
54907e053489dbec6c418507ea95497e
-
SHA1
0d2c047d2ab44ca31fe04dc763c7d345d92011e5
-
SHA256
cb611a968144c075ff5e5ce63f93402463f44fc6488a7ba651cac96f0e058ae6
-
SHA512
54a6566b1765283d065b0c94a741a471d52da877b3cd5f1ce34531961b8cca178302314fe541f15fddeb206df9a6d45d4b411699491fbc6c0f38cacfef1024d0
-
SSDEEP
768:3rxlnExDvgl4mGFtCVmlHyO56rzr4Hcc/8rgmoB1ToQBV13nIriU+g8lY3DtfkWI:3rvnExDvgl/utbyv4//8raTogV13IrTy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/movie1080p.mkv.exe
Files
-
54907e053489dbec6c418507ea95497e_JaffaCakes118.zip
-
movie1080p.mkv.zip.zip
-
movie1080p.mkv.exe.exe windows:4 windows x86 arch:x86
a7492a55836d9fe7c20b605965e88122
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
GetDriveTypeW
SetLastError
CreateMailslotA
GetLogicalDriveStringsA
GetProcessHeap
lstrcmpiA
lstrcmpiA
GetModuleHandleA
lstrcmpiA
IsValidLocale
GetStdHandle
FileTimeToLocalFileTime
GetModuleFileNameA
SuspendThread
lstrlenA
DeleteFileA
WaitForSingleObject
GetVolumePathNameA
HeapCreate
lstrcmpiA
CreateNamedPipeA
Sleep
scecli
SceSysPrep
InitializeChangeNotify
DeltaNotify
SceOpenPolicy
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 49KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 796B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ