Static task
static1
Behavioral task
behavioral1
Sample
orden de compra pdf 4586.exe
Resource
win7-20240221-en
General
-
Target
f3056274e82f991eb1a8bca6c7fa69fc_JaffaCakes118
-
Size
1.4MB
-
MD5
f3056274e82f991eb1a8bca6c7fa69fc
-
SHA1
6bce2218851fb306055778cba2dcfc29c4825b1f
-
SHA256
0de48042dd375741dc50366473ba5b4388d4c6f46a6b4772934d0c10f8f4d3f4
-
SHA512
a0b4e479164c8d8e20876283f49d6ea4ed3e433d337b36b42be735da84fdbc53da99484e8f708b0a3ba979a2101c7754587c6f7e23777487615e68cddc1a7e99
-
SSDEEP
24576:GQvWFrC1tkfo4GqY55DRWQBpK4rCAxMslhJ36ALXpKAs3G2d9SCCql8r:WFCtkfopN/qAxPrZKAUp5Kr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/orden de compra pdf 4586.exe
Files
-
f3056274e82f991eb1a8bca6c7fa69fc_JaffaCakes118.eml
-
-
http://www.hapag-lloyd.com/
-
-
email-html-2.txt.html
-
email-plain-1.txt
-
orden de compra pdf 4586.zip.zip
-
orden de compra pdf 4586.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ