Behavioral task
behavioral1
Sample
New request for quotation9867875fdp.exe
Resource
win7-20240220-en
General
-
Target
94808d496596f1b0e00c996d77c1af89_JaffaCakes118
-
Size
986KB
-
MD5
94808d496596f1b0e00c996d77c1af89
-
SHA1
09384ec9ee897d766b03e5eff0579d23c25e3bff
-
SHA256
294d980ee33b3ee783ef73efa634d8f910ac910f3a1d2b685daea4151dc7d3f2
-
SHA512
d6c6d13f52e1fb211c7e65ec49feed91f186c4464ba22c2c1f486bb7b2a14848198f5d7fd635f1f05282e20f51f26282ba15a67c4d90d8bc7d2a61705d7b19a0
-
SSDEEP
6144:/aUDG3Kp1O6VEJD6Lpzu5VGZ1xbt3oN/EqiOq762DOHXRSE8:/aUDd26VEt6pu5GbtwEqXq7pDOHw
Malware Config
Signatures
Files
-
94808d496596f1b0e00c996d77c1af89_JaffaCakes118.iso
-
out.iso.iso
-
New request for quotation9867875fdp.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 429KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ