Static task
static1
Behavioral task
behavioral1
Sample
Installer.exe
Resource
win7-20240903-en
General
-
Target
fae608da422c2096c8f0f485fefb0ff1_JaffaCakes118
-
Size
456KB
-
MD5
fae608da422c2096c8f0f485fefb0ff1
-
SHA1
ad9f89028b5edf6bdd7c26b2108e57950482541d
-
SHA256
ca58b053aedab68ee2a0db16a57e7c60d619d6d2dd8fb5b247b1a417c2b6f9f4
-
SHA512
720c4425ecd0f124f9c65b92cf6c817eec62512ffcce52966dc258692595642370b8afdd7bf52d760933123615488a0d9d4442df30fa116898132bd0a2e557a2
-
SSDEEP
6144:BpLEriCZKD89txjf83Q3P7uMkMyJ+Fb54x2pR0hmtPBwrwcd5ALCI4tVRa7Rxsmd:BpWWuxjf84CMnTm62UcdnI4t7Ogmb79b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Installer.exe
Files
-
fae608da422c2096c8f0f485fefb0ff1_JaffaCakes118.zip
-
Installer.exe.exe windows:4 windows x86 arch:x86
db906b368505116bfb45a642db6fdce3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
lstrcatA
lstrlenA
VirtualAlloc
CreateThread
LoadLibraryA
GetLastError
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
DialogBoxParamA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Read Me.txt