Static task
static1
Behavioral task
behavioral1
Sample
Delivery Details.pdf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Delivery Details.pdf.exe
Resource
win10v2004-20240426-en
General
-
Target
84f66cb2cd0eb3ab5e63f3554d62dfb8_JaffaCakes118
-
Size
383KB
-
MD5
84f66cb2cd0eb3ab5e63f3554d62dfb8
-
SHA1
38bd1404778c8add47ecce2bba77f9f3a61e6fee
-
SHA256
65599d32eb4a859e4371b57242be8eb216287e25dbf50e370adb4f368ca71aee
-
SHA512
bcd731dc9ca31e331b16a76b21f5e0334c8deaa36d0419bfa416246a9600db4a1d3b9eef4e422206da1d0901b319c02dd45b9e642b8cb280b571275f990788e5
-
SSDEEP
6144:Cx5ZRRylGzgtj8QTKWvrYvrYgQRs754bl1MCVyxqyzaIMTWAR4t:Cx/YUlcEeSebMCIxIhrRc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Delivery Details.pdf.exe
Files
-
84f66cb2cd0eb3ab5e63f3554d62dfb8_JaffaCakes118.zip
-
Delivery Details.pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 414KB - Virtual size: 413KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ