Static task
static1
Behavioral task
behavioral1
Sample
URGENT QUOTATION.exe
Resource
win7-20240419-en
General
-
Target
41c27be061ebbf97b3affa557d90ed9f_JaffaCakes118
-
Size
533KB
-
MD5
41c27be061ebbf97b3affa557d90ed9f
-
SHA1
88f42501db2d68cc527ed8703b13dcc959bfcf2c
-
SHA256
a5eb9c7fce3e3b97a05265f49936170b4a4009d611cf0cc16ec802ddadc433ad
-
SHA512
8fd2e350473f6d2346061e242c3603bbc1c7385df835ecba723d2b2d9f01ed9f2e67de99c789be8c48c6d60885e209bfac5576fdc69e259f738f45224cc5394c
-
SSDEEP
12288:uyYCLtUrq6sH1bqWb0xV6km39BAFoPmhqKGAG2xDSl9rAL:uyLR2361bqWbKV67B4hx/GIU9U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/URGENT QUOTATION.exe
Files
-
41c27be061ebbf97b3affa557d90ed9f_JaffaCakes118.rar
-
URGENT QUOTATION.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 605KB - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ