Static task
static1
Behavioral task
behavioral1
Sample
order_filter.pdf.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
order_filter.pdf.exe
Resource
win10v2004-20240508-en
General
-
Target
ba7f44b5f3e506f56d46fd9ed90571ea_JaffaCakes118
-
Size
395KB
-
MD5
ba7f44b5f3e506f56d46fd9ed90571ea
-
SHA1
4d31abdd8e0d0f6e06c55a03a7280f60a4dd2d93
-
SHA256
43e315e229ebf7e78014a10aac9a2ecf2803a4b7f92fbf8eebc5fd445418e807
-
SHA512
580a3d3dcce807512b6f2be4de65a9c5ed361112e40bdd7aaca34b880562e6c4f89ce3f9656b742cdc1e8be0676730f7e0bdad6a3687b1f196928c26bdd3a551
-
SSDEEP
6144:DUODGI2tL75tY51lXG8z4rSi63Ie6OOpXDfokp+9SywITY/:4ODGI6L7o5Xr4r06OS+9iIY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/order_filter.pdf.exe
Files
-
ba7f44b5f3e506f56d46fd9ed90571ea_JaffaCakes118.gz
-
order_filter.pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 465KB - Virtual size: 465KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ