Static task
static1
Behavioral task
behavioral1
Sample
ТӨЛЕМ ДӘЛЕЛДІ.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_5892d1fe3e67e8ade32c2ca211796974e7e58c1493a242d0cb92fc651201de91
-
Size
639KB
-
MD5
72a621c513afebc9b58cfc6cdb060b2e
-
SHA1
10b69743638e8bd718e11f13e50a004ff52346b7
-
SHA256
5892d1fe3e67e8ade32c2ca211796974e7e58c1493a242d0cb92fc651201de91
-
SHA512
cf3e5d9504cbf5781c5d12fc0f6be657ea0ddd3ca24ab488781817bd691c52328fe21af518c6f85324d64263fa2e4d6571ea2ec6e4cfd127ced9db83a0e6a12b
-
SSDEEP
12288:6/2/xY0azWwzP15I92+nCD/SG0weKi6v2OdigMh3ly5OU1nF6phtZfvAIs/CPkZ5:6v0uVzN5dD9emuOd7MXuD1nF67IIs/CM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/ТӨЛЕМ ДӘЛЕЛДІ.exe
Files
-
JaffaCakes118_5892d1fe3e67e8ade32c2ca211796974e7e58c1493a242d0cb92fc651201de91.zip
Password: infected
-
b77696c39717e0673c2e2381638370b058aae6fb19468818ca426f00697449fd.zip
-
ТӨЛЕМ ДӘЛЕЛДІ.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ