Static task
static1
Behavioral task
behavioral1
Sample
(PO) No.2029243EL0003.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
(PO) No.2029243EL0003.exe
Resource
win10v2004-20240419-en
General
-
Target
1f94fb08922b82be4730d012c75fd75f_JaffaCakes118
-
Size
675KB
-
MD5
1f94fb08922b82be4730d012c75fd75f
-
SHA1
81968a60956912e7fbb955eeb431be57076836f7
-
SHA256
c271c377a118e7a70115cef3cca0c11638bf928124caa0ba2a6f569e98cd3e50
-
SHA512
bd681fdbf987937c2faf8021333abb403327cbb665edd91079ea137abc1c2be273277423b5da98aeed629e01d557dff0135421b5c826f17b30d471b3c064a418
-
SSDEEP
12288:j/JEWPCyfQ+xlCvIFIF4kKPFYG9DO3m6wpdRb+2+x2XcCvZTaxMp32X2G:j//Ct+SYYQX6GJ+fCcYVp3bG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/(PO) No.2029243EL0003.exe
Files
-
1f94fb08922b82be4730d012c75fd75f_JaffaCakes118.zip
-
(PO) No.2029243EL0003.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 386KB - Virtual size: 386KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 522KB - Virtual size: 521KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ