Static task
static1
Behavioral task
behavioral1
Sample
PI 3I502.gz.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
PI 3I502.gz.exe
Resource
win10v2004-20240508-en
General
-
Target
b21ac69b517879638c7b256da7a23316_JaffaCakes118
-
Size
632KB
-
MD5
b21ac69b517879638c7b256da7a23316
-
SHA1
9482205424f587bb1bfaa3ff001dccb6d2db6f58
-
SHA256
bc2bd70d7c5b36b685f11bbca334dc1ce246d896e40c67f3dc191fefcd7f42bf
-
SHA512
4bee1deb246c40f014a726ed5823fd278c9120e80295037f258c0360fd9abfe86677c113c08060040a72d4f8abba2685701f952e1f4be7b91014aad26c9e3027
-
SSDEEP
12288:dIIdjLFDdmMYqokT59E7WqaJ7KkjSYWEsP9ciG3TGIipBvhCr7Ymo:3d/FRmMYy87hg7KkXWrPhG3TGIqJCrq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PI 3I502.gz.exe
Files
-
b21ac69b517879638c7b256da7a23316_JaffaCakes118.rar
-
PI 3I502.gz.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 841KB - Virtual size: 841KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ