Static task
static1
Behavioral task
behavioral1
Sample
SHIPPING DOCUMENTS.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
SHIPPING DOCUMENTS.exe
Resource
win10v2004-20240802-en
General
-
Target
acab4dcda1adc893181127e37ceb3783_JaffaCakes118
-
Size
1.4MB
-
MD5
acab4dcda1adc893181127e37ceb3783
-
SHA1
85ace292032545cbdb3398b4c6c85ad130d08bc1
-
SHA256
684b084150230e5c629a4c5e6f43f540cc207cfb4f0d20adcaaa60b100d796a6
-
SHA512
4d947a89aad44a7195f2d9c7cc84b1721c1c76bf9302a425172bd78ae8e6b733a5ede91e4a0e45d9e8b91b8cfa4f13653a88a7e7a44abcdc082d6958783a17cf
-
SSDEEP
12288:PbyF6l3CgdOyrhbBSvpNX6VkbWLYLPnAHizOS8RgV1ZEmKMOhqfJo1mJxRHHE6mx:Pbxfb276z3CSSJSM8qfJYOW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/SHIPPING DOCUMENTS.exe
Files
-
acab4dcda1adc893181127e37ceb3783_JaffaCakes118.iso
-
out.iso.iso
-
SHIPPING DOCUMENTS.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 618KB - Virtual size: 617KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ