Static task
static1
Behavioral task
behavioral1
Sample
ordine.Pdf__________________________________________________________________.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ordine.Pdf__________________________________________________________________.exe
Resource
win10v2004-20240802-en
General
-
Target
867162e905df371e5cf40a9c2c42dfd3_JaffaCakes118
-
Size
185KB
-
MD5
867162e905df371e5cf40a9c2c42dfd3
-
SHA1
1722736be3da9ceaa0740bd1692d8969b1053e88
-
SHA256
8603773ea213e87cb32c45f0f51831e78de283bb48884d2d8d0d2f03dcee9916
-
SHA512
9798b0b34887ed3e0d24d86985afe10e1d440320288b3e7aa9ccd2915808aea17753ee954ec4c9cb0b77ceb27a4cc5f2452e1cc82f569404431598ebb811ac2b
-
SSDEEP
3072:NSR7ES1uWwGjH1iEQRru/GPyG58pef21YxP7gNheo2C9b20uv/hTXJijV4:c1pwWUEQ4u98oOixPENN2guvZTXeV4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ordine.Pdf__________________________________________________________________.exe
Files
-
867162e905df371e5cf40a9c2c42dfd3_JaffaCakes118.zip
-
ordine.Pdf__________________________________________________________________.exe.exe windows:5 windows x86 arch:x86
de9be4e300f7ce4258f18d64a5d440c1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
GetTickCount
VirtualProtect
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ