Static task
static1
Behavioral task
behavioral1
Sample
Urgent Purchase Order.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Urgent Purchase Order.exe
Resource
win10v2004-20240709-en
General
-
Target
74dc5c2e1755a1d74dbfb6d0d53ea86c_JaffaCakes118
-
Size
465KB
-
MD5
74dc5c2e1755a1d74dbfb6d0d53ea86c
-
SHA1
962761689c4c07d34d8a08d8265769e2a03987c2
-
SHA256
81d9bf0b215b180b801f6f9122d38823a951f32aa7224ee63cbb25daf374d637
-
SHA512
8267d2d4499be5395b419bba53b7a19e5f214afd06cecf4a3709391f6afa3facf9b08c6c2c954609211c998895e04e1c87b62088a0041500d6c7a6daebf4b021
-
SSDEEP
6144:mWtTVZOSORB8kbipWBymdsAqHrchnDqvjlxQNdJBaStPROtkMd4PJ9tLZKRCnpTT:mWJeShkbY+UCmYZaStZOtFde7zK0nhT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Urgent Purchase Order.exe
Files
-
74dc5c2e1755a1d74dbfb6d0d53ea86c_JaffaCakes118.7z
-
Urgent Purchase Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1017KB - Virtual size: 1016KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ