Static task
static1
Behavioral task
behavioral1
Sample
SWIFT CODE.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
SWIFT CODE.exe
Resource
win10v2004-20240226-en
General
-
Target
2c6b9917962d7dcd200fdb0669d187e7_JaffaCakes118
-
Size
417KB
-
MD5
2c6b9917962d7dcd200fdb0669d187e7
-
SHA1
a00f3f3e9f4db9fe882c5a02d93152cf1aa5628e
-
SHA256
191d5be451e6dfe59a04142c04f9becdd4e4595742cb30a212a530efdf990926
-
SHA512
a0ae7623b64b90bb94785c51cdc60a9f47431fa91d91a1bf4f99b2f8462bbeb58bdecea1bfe39f2ab73d061c2eeede1d453658353aaa6cda8122f22c5de6e811
-
SSDEEP
12288:rr+sBhjEyQoEfjMoAMEEq6rQTt4+MffMAr+b7BBYj50Wz:/+C4fjkM06sJdAr+fBu9z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/SWIFT CODE.exe
Files
-
2c6b9917962d7dcd200fdb0669d187e7_JaffaCakes118.rar
-
SWIFT CODE.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 574KB - Virtual size: 574KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ