Static task
static1
Behavioral task
behavioral1
Sample
Offer Subscription.exe
Resource
win7-20240508-en
General
-
Target
441b1ea27457c6c1b314716249769d92_JaffaCakes118
-
Size
3.7MB
-
MD5
441b1ea27457c6c1b314716249769d92
-
SHA1
7eda05a4fca3a90ad396adc105d7c11a25828e4f
-
SHA256
dd8dd067b3a02afd5862f8ce6ef5d01166a4abafb5a7855f323380467733cdad
-
SHA512
cff0bb86d5dae9f54c84ffd6f5ee9d5953e926d6963db4088f7609626fa53eaf93f00ca1191d5bd9648a4370c769ad956beb300cb468d329b45c92c4a47a3296
-
SSDEEP
98304:hRbEhsAIS0a7UUNbIFS8/ubHQUo4z5wLC9X2sct:7QhaE7UUVII8/+wUoq5kt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Offer Subscription.exe
Files
-
441b1ea27457c6c1b314716249769d92_JaffaCakes118.7z
-
Offer Subscription.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
YG;x.^ Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ