Static task
static1
Behavioral task
behavioral1
Sample
Purchase order list.JPG.scr
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Purchase order list.JPG.scr
Resource
win10v2004-20240508-en
General
-
Target
731797c96938873c7ed44fdccc2595d5_JaffaCakes118
-
Size
540KB
-
MD5
731797c96938873c7ed44fdccc2595d5
-
SHA1
3a23b5e285888a383d0036d3a9c557d2b62f9b99
-
SHA256
4ea28d5654139872543b0aa3987e97ddb0a92b977afdd993efbb64b34bc51322
-
SHA512
93ec9fee6d1d1b89c8bf9c28835431b3c3267938795dd824ab32a303f73054640b5e2d44d57dd1ec284bf14fa614671be290004902e422a0226bd66264e006e9
-
SSDEEP
12288:8kujl49Q5rb9c8Hz+n3ds1QNUKokN+XpDPCMm3YCZhyVyDqfBq:m4Q5rBA3BUZunMmPZhyYDqQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/Purchase order list.JPG.scr
Files
-
731797c96938873c7ed44fdccc2595d5_JaffaCakes118.zip
-
Purchase order list.JPG.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 601KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ