Static task
static1
Behavioral task
behavioral1
Sample
Document_BT24PDF.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Document_BT24PDF.exe
Resource
win10v2004-20240226-en
General
-
Target
e07eff7ce4bb2af1d6b8c3c564b66b19_JaffaCakes118
-
Size
1.2MB
-
MD5
e07eff7ce4bb2af1d6b8c3c564b66b19
-
SHA1
d08a18116685a51729f3653d275a0b7a3dcf0997
-
SHA256
59f4b8d890618bc836dc9fd9bf4c40a1aa6dc7264d6dbbcd3964c3ff5f7e7231
-
SHA512
f6708a8e48fc2f5f64792ffe547ab6e032d3e79d8423d87caef749164169fea4881e288b48cabc4bfaeb7121131e705c8bd2cc4d0535bea9a58b337966893edf
-
SSDEEP
12288:gIF/jmBcdGXTK8+2K+Pjf/dKl1niU1vvxWSgjvwd5uDqt3Wvwki+LHuXifkIKtqk:5wadLCjfglUwvxWN4T3pk5ht2xBZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Document_BT24PDF.exe
Files
-
e07eff7ce4bb2af1d6b8c3c564b66b19_JaffaCakes118.eml
-
http://www.agroconcept.ro/
-
-
9fdb1c67.png.png
-
Document_BT24PDF.iso.iso
-
Document_BT24PDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 819KB - Virtual size: 819KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-2.txt.html
-
email-plain-1.txt