Static task
static1
Behavioral task
behavioral1
Sample
SOA SWIFT COPY_PDF_________________________________________.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SOA SWIFT COPY_PDF_________________________________________.exe
Resource
win10v2004-20240508-en
General
-
Target
9d5f740b7d5809ea25730e64b4fa912d_JaffaCakes118
-
Size
1.6MB
-
MD5
9d5f740b7d5809ea25730e64b4fa912d
-
SHA1
471105c6d5d9ea176776a63290b8e5afeb2b8490
-
SHA256
9258d2295790e426975b82410c873426cdce760ea363bbe4c3b3adbbcecd0798
-
SHA512
0a5410b01fca40457da0881ab011a9ad70a72f69b961b88fa091d812dd84b0e76094702d9f519a0743997000e9f1ec66d71120db3f775ae65079585047c96f1d
-
SSDEEP
24576:7ewJ9gLO8jEHWwZrQ8dKooBNYP11tJEx7KWACg/PkYwgayeA2vS7kEroMYMt28Mo:tJ9gw7ZPdNWNIJEx9A2gAKwErYjErJ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SOA SWIFT COPY_PDF_________________________________________.exe
Files
-
9d5f740b7d5809ea25730e64b4fa912d_JaffaCakes118.rar
-
SOA SWIFT COPY_PDF_________________________________________.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ