Static task
static1
Behavioral task
behavioral1
Sample
invoice.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
invoice.exe
Resource
win10v2004-20240419-en
General
-
Target
1d4fa309108061f3c51b80f071f26f3c_JaffaCakes118
-
Size
308KB
-
MD5
1d4fa309108061f3c51b80f071f26f3c
-
SHA1
dca63e99f89cee44b89cefa9e7da53ee65e07f46
-
SHA256
6af1c2eaab23e63e51e0089fd6e94d5079bb5ce141b9684bda854f378f1f0977
-
SHA512
1300867cef3cb6404099450decd8335f452ecf1cf6e30c2b55954517986bb6d522f2993e31b640ac688b254f56d0135bc4c5d36bc9bc83be0dfc4f4309f483c4
-
SSDEEP
6144:6CN9BcsqVD9kJEJsxN0lGB3IOAtNu/vuVizzXI2mWYyWtMmB4tojPMenp+:6ISsqMJEJI09OCQ/mVizDI1LyWq04CP8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/invoice.exe
Files
-
1d4fa309108061f3c51b80f071f26f3c_JaffaCakes118.zip
-
invoice.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 369KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ