Static task
static1
Behavioral task
behavioral1
Sample
Payment_Advice MT103_PDF.exe
Resource
win7-20240221-en
General
-
Target
fe3a974de2555a9e8c8236cc2a65db8a_JaffaCakes118
-
Size
814KB
-
MD5
fe3a974de2555a9e8c8236cc2a65db8a
-
SHA1
758ae28dac195e3906c1cae63f4e6a5ef80e5c30
-
SHA256
3a6526bd0319f9cacdfe469a2dcff21576336aee97e6bca996c4753178e4171c
-
SHA512
9d02a8beb302a58783bfae588dab323ed23e281e0f1e79961382e864c3600df5e326254216d289c9046c72a5eb80b4a307745699b911bdcd4fbdf09fc223a448
-
SSDEEP
12288:GfWE6MMpp2YQwkf8HRfy6/Cz9/fErzkgdxpZ9mEY9r+5096EPoc40k92a:2af2YEfMR5Sqti9r+U6IoZ0k9v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Payment_Advice MT103_PDF.exe
Files
-
fe3a974de2555a9e8c8236cc2a65db8a_JaffaCakes118.ace
-
out.ace.ace
-
Payment_Advice MT103_PDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ