Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER...exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER...exe
Resource
win10v2004-20240508-en
General
-
Target
397d91e93834c24382fb6dabd60642e9_JaffaCakes118
-
Size
322KB
-
MD5
397d91e93834c24382fb6dabd60642e9
-
SHA1
727ed5704635e9e82149cfc6f50157a90520e3e9
-
SHA256
32ebced9dcdb337d540ace70516bdfe92379066cbe7da4f5842430daffbbf0b8
-
SHA512
da1194de4a49ef532e9c2f93073e1e38b038d9e1c0958a83fc6d4860332c05a68fb8f35035883917b470af6190294992a9a66ff8a463175226aec58bbd5745dd
-
SSDEEP
6144:lDCC9MULZiKw3Wv5xJrfHQTio4Uj9+gH9Jm/o1v6DKs0fIE:0aZpAqJrfQTP4Ytdl1wKbQE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PURCHASE ORDER...exe
Files
-
397d91e93834c24382fb6dabd60642e9_JaffaCakes118.zip
-
PURCHASE ORDER...exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
|&zh)O Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ