Static task
static1
Behavioral task
behavioral1
Sample
Vista 949 by Megan/Full Install.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Vista 949 by Megan/Full Install.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_6e5ac7d5abd2fce0a866169346f9178f
-
Size
569KB
-
MD5
6e5ac7d5abd2fce0a866169346f9178f
-
SHA1
ac515b677544aa44ba7c21305ca58c46da7a5a5f
-
SHA256
8fd7a8092ffd0f29f9c87e708b1bef0a868243db25807513e8d5cc2c28e176af
-
SHA512
7e8d663e624c55d7103072524164deb494c0dc8c5f3168889671939443d4f916e1134087c7cb48741cc5ab14ad74a3e08b922850d098b0dcc3f10133d4de2390
-
SSDEEP
12288:GUb6GeUz+9mVwdbAIAu73qtoduSCMgW1LDc4snnoc:koWmV367qiuDW1L3snR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Vista 949 by Megan/Full Install.exe
Files
-
JaffaCakes118_6e5ac7d5abd2fce0a866169346f9178f.rar
-
Vista 949 by Megan/2Day.png.png
-
Vista 949 by Megan/Days.png.png
-
Vista 949 by Megan/EventWindow.png.png
-
Vista 949 by Megan/Full Install.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 508KB - Virtual size: 507KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 347KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Vista 949 by Megan/Message.png.png
-
Vista 949 by Megan/Thumbs.db
-
Vista 949 by Megan/TodoWindow.png.png
-
Vista 949 by Megan/cal.ini
-
Vista 949 by Megan/evnt_btn.png.png
-
Vista 949 by Megan/line_Test.png.png
-
Vista 949 by Megan/marker_t.png.png
-
Vista 949 by Megan/task_glass.png.png
-
Vista 949 by Megan/todo_btn.png.png