Static task
static1
Behavioral task
behavioral1
Sample
PO#A91641-MSKU9953077.exe
Resource
win7-20240708-en
General
-
Target
71855311af9db1549bd4f9a580196a57_JaffaCakes118
-
Size
1.2MB
-
MD5
71855311af9db1549bd4f9a580196a57
-
SHA1
b0f2f9c5a5d463118e27751acba702d16850f8c5
-
SHA256
b26d7f1c78311fe2e149042bbfeb9b14781de9e7dfd3bcb1e78ec540fe316ad6
-
SHA512
0f1dea1769f4000965301f269a54c2fc2be7c275abc98211169c384a9a3260d71601245595f608c6d2d761127899ab291c5648d91af7fc86b86d8a22e2f7d6ed
-
SSDEEP
6144:vbhdbMroO/lGquzY2ZmmjrmQGnHpnP6aupTzqfU0IgDKTTVz6TRvdqs0QC+VkTfW:zbMrQHzY2ZDgR6aKiIgDQVyYAkTfg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PO#A91641-MSKU9953077.exe
Files
-
71855311af9db1549bd4f9a580196a57_JaffaCakes118.iso
-
out.iso.iso
-
PO#A91641-MSKU9953077.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 425KB - Virtual size: 425KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ