Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
Purchase Order.exe
Resource
win10v2004-20231215-en
General
-
Target
ecf2a267d459e5ee98b045535088e7f4_JaffaCakes118
-
Size
572KB
-
MD5
ecf2a267d459e5ee98b045535088e7f4
-
SHA1
9691bec6613cd78766790b4b4b04616cee7a0b95
-
SHA256
c0e944e12aada6320b1bc8fbf5d305bbdded6f63c1ec8446e86ee11c4a19fd95
-
SHA512
02193fd9d29186b6024fb452c08a8cc5b3687a8e8c7a2fd981c832e43a041337aee956c924392f8e4e5e470df41cd6681b95bddfedd8d8e6ed41a96083f6bee4
-
SSDEEP
12288:xR3TyU0jr2kshV++E7s3obJ5/BjA5nPDcFzMeOmUFrLqxDzFdhcb:XDyXr2kO++us3orpjWPDxeOxnaD2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Order.exe
Files
-
ecf2a267d459e5ee98b045535088e7f4_JaffaCakes118.rar
-
Purchase Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 569KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ