Static task
static1
Behavioral task
behavioral1
Sample
03a4832b54e985efb555dfc29b98d1da_JaffaCakes118.rar
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
03a4832b54e985efb555dfc29b98d1da_JaffaCakes118.rar
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
ADJUNTO_EXTRACTO_75422514701354879545042432022154657988454047224024231254457878797857055454242204243.exe
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
ADJUNTO_EXTRACTO_75422514701354879545042432022154657988454047224024231254457878797857055454242204243.exe
Resource
win10v2004-20240419-en
General
-
Target
03a4832b54e985efb555dfc29b98d1da_JaffaCakes118
-
Size
238KB
-
MD5
03a4832b54e985efb555dfc29b98d1da
-
SHA1
e5ddb5031ed3c0ec626240f8010b7c6ffd3d3383
-
SHA256
906153e60811cdd8f583e0836c89be808ed8afcecd6d933b1f553d62f9f2469f
-
SHA512
0686ccb46c30d5480b34cb2cde46d305fcad9d2323a0e20538b344c93895c5836d980443570c9bb35e47decddc2dd373896dbe713955bb2eed40e6a1f5b38012
-
SSDEEP
6144:buAbn3a5f/c6kNiRBDEoRtsdkYXU9yYEJ/:buYG/c6kNuXtNYXU9yYw/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ADJUNTO_EXTRACTO_75422514701354879545042432022154657988454047224024231254457878797857055454242204243376482_8795446423402112156454978750443420211264875727234648454_54601239784546421342215246578542_64512_pdf.exe
Files
-
03a4832b54e985efb555dfc29b98d1da_JaffaCakes118.rar .ps1 polyglot
-
ADJUNTO_EXTRACTO_75422514701354879545042432022154657988454047224024231254457878797857055454242204243376482_8795446423402112156454978750443420211264875727234648454_54601239784546421342215246578542_64512_pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ