Static task
static1
Behavioral task
behavioral1
Sample
INV 884017.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
INV 884017.exe
Resource
win10v2004-20240508-en
General
-
Target
2dad5792f81bf91a729dd2a7bc5784bf_JaffaCakes118
-
Size
256KB
-
MD5
2dad5792f81bf91a729dd2a7bc5784bf
-
SHA1
e3fceaa755fd85556dd9250ed9ccab47758aa49f
-
SHA256
4594520479c311eeb4c54c63c755a53d7180546a15eac9cbc4ef4b7dbf7b4b09
-
SHA512
df0670e3bebb3d3c335d884bfb0f0628036bd1cd8368079b72ae4783d780f92d54337f01de3535dddda87386c1f547c428be7b574b1cd54f064ff28355687970
-
SSDEEP
6144:97QKirdwo7J1CIAFGcI+aXO0OueY9shgS/aSxO/OAPA0L:BVizd++9OueY9sm5Sx3A4O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/INV 884017.exe
Files
-
2dad5792f81bf91a729dd2a7bc5784bf_JaffaCakes118.rar
-
INV 884017.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ