Static task
static1
Behavioral task
behavioral1
Sample
PI 1.exe
Resource
win7-20240215-en
General
-
Target
dff63bb0e526c691348ec2c45a789a94_JaffaCakes118
-
Size
456KB
-
MD5
dff63bb0e526c691348ec2c45a789a94
-
SHA1
7ac19523d20a32b03f8811d022f832ca4e4c8642
-
SHA256
7e75e8e5338cf7b9f4059d5cc8e8c9c9dfa465a3d3514f6bed5078576b0310b2
-
SHA512
ef676b04b70c2a42e55aca896c64d15bd4f396e48783301d5c3fab107717e8e749b652f6edbf58d793b2531e38d2958e86110fb02ac1a67a4f27cf3833642f0d
-
SSDEEP
12288:+5unsXZzCqM7PuUNJM6X4uNp/hQmeKThj:Cu6y7PueJAuPhQYFj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PI 1.exe
Files
-
dff63bb0e526c691348ec2c45a789a94_JaffaCakes118.zip
-
PI 1.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 725KB - Virtual size: 725KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ