Behavioral task
behavioral1
Sample
Order.Pdf____________________________________________________________________.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Order.Pdf____________________________________________________________________.exe
Resource
win10v2004-20240611-en
General
-
Target
1c03525fe36294fd895406affa2c9fb7_JaffaCakes118
-
Size
194KB
-
MD5
1c03525fe36294fd895406affa2c9fb7
-
SHA1
84eecf9576ffe085a3b55d50866c39b0aef050ea
-
SHA256
65600ed89533fad07a9db092d4ac549cd5be0fe9ff28432e3dce1066aba9434f
-
SHA512
f449240523ba68569cd30cc45d33b1af55526e174d28a2badf9665c403271cb94bb2e3a46d1b8a2eae5f8d42c113c0ff5724aad60ff78fea4bea4adac3366610
-
SSDEEP
3072:hzLKWikvfIl2F1h6ei2KWS+xYBrDngGdG79RxjsYULcz3V5weO6IGGmZvmsK/6gw:Ao1/5nKBHRNCh5wjeZ+sKBSIivoWgS
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Order.Pdf____________________________________________________________________.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Order.Pdf____________________________________________________________________.exe
Files
-
1c03525fe36294fd895406affa2c9fb7_JaffaCakes118.zip
-
Order.Pdf____________________________________________________________________.exe.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE