1rTwkbyP7mGSKroR.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Quotation_Request_Sheet_0089600090944833933.exe
Resource
win7-20231129-en
General
-
Target
ada5c21676bbedc2d53858fba5d33702_JaffaCakes118
-
Size
271KB
-
MD5
ada5c21676bbedc2d53858fba5d33702
-
SHA1
337498519c6b18cd4377deb3458b75c2d22deec5
-
SHA256
0c493a39761851a26d351a3258692fe144cf756097a4bd923a959e8795ad6c6c
-
SHA512
5bc026d2b9e6424d49d0e9c3a56ec3d383ada9476562c6c05a6fe0ded5f63e777413c452b6636882c917a7574070c7f5ad3fc3b6e7d17a56b74d58c6663bc27c
-
SSDEEP
6144:Kghwd46QVqqkwYm+f6kmd+PdTc3BZIKI1+OOxx3t09q+sEACKA1mPf:KgL6g//RoTUIL1ix3OwBnygf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/Quotation_Request_Sheet_0089600090944833933.exe
Files
-
ada5c21676bbedc2d53858fba5d33702_JaffaCakes118.7z
-
Quotation_Request_Sheet_0089600090944833933.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 303KB - Virtual size: 303KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ