Static task
static1
Behavioral task
behavioral1
Sample
CN-2nd Reminder-XXXXX1218-27022020133851542950_pdf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CN-2nd Reminder-XXXXX1218-27022020133851542950_pdf.exe
Resource
win10v2004-20240426-en
General
-
Target
8e8af40f224892429e7cc2e287387357_JaffaCakes118
-
Size
362KB
-
MD5
8e8af40f224892429e7cc2e287387357
-
SHA1
8e265b4c4ac22304d45ebeb7067a7583647ba263
-
SHA256
af72c9a94b3b564c31424e25ba2f3527c5d316de2c5edc1d30b509baf529067d
-
SHA512
3173db42ebf4ebe28d70c42313564a7e5748d118c1f19cf42b26fb296fcfb67bdfd86ee282a7515e4ffe7b9ace90e7d334a6b08ed2aac7634380746b584de378
-
SSDEEP
6144:zesa+mnWEyEZGqQQhVhOCbQp2XkGcq2a7WItMMPOHpvHlJnlNRJo:EnWEDjQQhnOCb8207q2rIyuyflJnlNRy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CN-2nd Reminder-XXXXX1218-27022020133851542950_pdf.exe
Files
-
8e8af40f224892429e7cc2e287387357_JaffaCakes118.gz
-
CN-2nd Reminder-XXXXX1218-27022020133851542950_pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 391KB - Virtual size: 390KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ