Static task
static1
Behavioral task
behavioral1
Sample
COPY180921348283848482293942938492929440293482828484-PlDF.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
COPY180921348283848482293942938492929440293482828484-PlDF.exe
Resource
win10v2004-20240508-en
General
-
Target
a11aa25b9ce40579c0546c071e5593fd_JaffaCakes118
-
Size
1.0MB
-
MD5
a11aa25b9ce40579c0546c071e5593fd
-
SHA1
a6d544a03523f8d5c2ac9bfa2245e7992c656cbc
-
SHA256
b24383ce4aab8beb5478d11371c9871e3bc310677bd4dd279c69f15a3af6f01e
-
SHA512
7b3c12dd8563dd4c5129dea5b4e507279b329c28a0c1c60fd64ad531d8b7ecb644266fde1349efbe22ca43459e951c0e1ab36147de6ccbf25e99139ee99ba198
-
SSDEEP
24576:GbveAjjxIDGIFqZgxD2u8Bvqt2a56VFRK72Z41lcPNmGZ:Gb2AjjxIAZuYBvq5QFo7ksQNmG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/COPY180921348283848482293942938492929440293482828484-PlDF.exe
Files
-
a11aa25b9ce40579c0546c071e5593fd_JaffaCakes118.zip
-
COPY180921348283848482293942938492929440293482828484-PlDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ