Static task
static1
Behavioral task
behavioral1
Sample
Statement of Account - July.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Statement of Account - July.exe
Resource
win10v2004-20240508-en
General
-
Target
63b7fe6ad2c3dd2b1a0b829cf076c6ac_JaffaCakes118
-
Size
461KB
-
MD5
63b7fe6ad2c3dd2b1a0b829cf076c6ac
-
SHA1
442c48fe65b3563f904bcbda9933d6feda8d18cd
-
SHA256
51cccbc60b6eee19aca1e805a04a850732145da33d59a441b947028f57701b5e
-
SHA512
518de95de9d4f0cf28dada0c4f90786a1c3b4c7aa0614c41d5ee10d00e03ac55c5e8c8d3a88c0c042fce5009e2eb468c93bc3ead7cd1537ec5ee3e42405d2718
-
SSDEEP
6144:AohBJVz3dA9XdWJcL7ukPCl1RfbmObGAfgDVyb+ZERa6ZVGfpLJRkf3jI1sUu3g/:3jEbMRfbmObrYkb+ZqvWxJufT4sC5j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/Statement of Account - July.exe
Files
-
63b7fe6ad2c3dd2b1a0b829cf076c6ac_JaffaCakes118.rar
-
Statement of Account - July.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 540KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ