Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_75fddd0d88efc7ec0bc29b95633c6be8e96247357a49d3f50922ee0ee233f3d1
-
Size
7.8MB
-
MD5
3fc9e9117798d8846a236d89665dd3eb
-
SHA1
827b32bc9b97a4d77b331ce7102ebacfbdea44e3
-
SHA256
75fddd0d88efc7ec0bc29b95633c6be8e96247357a49d3f50922ee0ee233f3d1
-
SHA512
9692e207a75ec705f8eb0ad1a24bddb416b05f746a892be5fe27cba5810ef6cbda89947e8f7c3437f50452fd5017a4aa6f49933bccbd63cc0dfe92b5bb2141f3
-
SSDEEP
196608:1BU9ON3qXh6MC4wyIT5glAI9H1z53q4+Wo7HsF8naPlyuNEX:DsXERBr1glAGphL+lIF8naPoeU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Setup.exe
Files
-
JaffaCakes118_75fddd0d88efc7ec0bc29b95633c6be8e96247357a49d3f50922ee0ee233f3d1.zip
Password: infected
-
Setup.exe.exe windows:6 windows x86 arch:x86
2c2c8a0f07b8dabf29d974b2f09dbdf9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetProcessWindowStation
Sections
.MPRESS1 Size: 7.0MB - Virtual size: 14.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE