Static task
static1
Behavioral task
behavioral1
Sample
220820185117653724284721341YRWYRUE1NWGBQWET P1DF.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
220820185117653724284721341YRWYRUE1NWGBQWET P1DF.exe
Resource
win10v2004-20240426-en
General
-
Target
515c915dec868cc6598e138229d2c8e8_JaffaCakes118
-
Size
1.0MB
-
MD5
515c915dec868cc6598e138229d2c8e8
-
SHA1
d8a5e4c6f15c9fb0165ee74f4e41cd5f50e55c43
-
SHA256
84c5574dbc466b94e60633e906e82d5c73b87e9280d6acdba20fa04ff335862e
-
SHA512
fb9e24e1a14ad98573cb615b9aa68232ead87f7ddd8fff82fc61ed2242bb92731f0ba23b9ec5b4ca090d9216a8b1ec56b690e48a5f3ae8a6703f1f9ccab05b56
-
SSDEEP
24576:eREQCsYFiPExkihh7oqqVMqSp5uss+hzXAH/:eREPFiPEJ6VMqKuOhS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/220820185117653724284721341YRWYRUE1NWGBQWET P1DF.exe
Files
-
515c915dec868cc6598e138229d2c8e8_JaffaCakes118.zip
-
220820185117653724284721341YRWYRUE1NWGBQWET P1DF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ