Static task
static1
Behavioral task
behavioral1
Sample
PO#56367-453-4366.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
PO#56367-453-4366.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
SCAN - PO#56367-453-4366.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
SCAN - PO#56367-453-4366.exe
Resource
win10v2004-20240426-en
General
-
Target
3391d480b162184eee4be782760866e3_JaffaCakes118
-
Size
811KB
-
MD5
3391d480b162184eee4be782760866e3
-
SHA1
6694c0c850441e765938b9f3dba3f8f9b25a195e
-
SHA256
1fd5e44618e160d269da31cfcab2dfe8c65ea453bf85381add18a982937de448
-
SHA512
56dcb68bb815ecea318e269b6980f8f80d1c2e5bad73ae2e3285a63221cf41c4994a7c4d16aa635e6a80cc70701bcb798d998975aae9ce930302847a816ff84a
-
SSDEEP
24576:b80bu/5iFULUSzmBk9BG5qLVgpCqa5sL2tniqU:b8v/5iiLFkN9y7tk
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO#56367-453-4366.bat unpack001/SCAN - PO#56367-453-4366.bat
Files
-
3391d480b162184eee4be782760866e3_JaffaCakes118.rar
-
PO#56367-453-4366.bat.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 433KB - Virtual size: 433KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SCAN - PO#56367-453-4366.bat.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 435KB - Virtual size: 434KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ