Static task
static1
Behavioral task
behavioral1
Sample
loadme.exe
Resource
win7-20241010-en
General
-
Target
54e4861147b8a4d22839a6b9bc9af132_JaffaCakes118
-
Size
1.2MB
-
MD5
54e4861147b8a4d22839a6b9bc9af132
-
SHA1
43fdfa544df110c7e97c4379d1f6ad024c21889e
-
SHA256
cc13d68c430599f1628fcb4798159f4b78173120ad95e2fb66fc01494e9f7616
-
SHA512
58b3c7619451419d28705d8c990621d642dc5d2bf3c2219d4ecc4225bdb07fe38015951b043a16b395237cd3c3535d08d113e657e0ffafdb88505c6624429d84
-
SSDEEP
24576:QO0u2WSIrSTRbqHqvWjnKtCZLYPv7Oxb+QffJ+H+hH2xuJbwdRYgC:Yu1atGHqknKQYPv78m+tiebwDYgC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/loadme.exe
Files
-
54e4861147b8a4d22839a6b9bc9af132_JaffaCakes118.zip
-
loadme.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 138KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ogepfppu Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iyyvxetd Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE