Static task
static1
Behavioral task
behavioral1
Sample
E-Fatura000000000382920.exe
Resource
win7-20240729-en
General
-
Target
01f0d49ce7156ac79ad7d69737e15e77_JaffaCakes118
-
Size
308KB
-
MD5
01f0d49ce7156ac79ad7d69737e15e77
-
SHA1
59af534c6536183710d5aa573b54859b115790c9
-
SHA256
06ec8a555a6c889ed00cf5d054d1ee4e148c02a0f80ef3aabef4189917ab8fc5
-
SHA512
fc0a3dae628f6bbe272c95e88a0f67ff916d395268a34e22d22340e997ed83ac87a2baf349838e5641fe12342525cfb7337be40389fe97c4141fb6c8a969c67d
-
SSDEEP
6144:q7uMRDj5EtspXRml7CQZVmTJCSi88zwENITARkpXmJ4N83CYSbuF:qFRf5WUUlP7VSi84/NITYkp4tSbq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/E-Fatura000000000382920.exe
Files
-
01f0d49ce7156ac79ad7d69737e15e77_JaffaCakes118.rar
-
E-Fatura000000000382920.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 451KB - Virtual size: 450KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ