Document_1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
TNT Original Invoice.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
TNT Original Invoice.exe
Resource
win10v2004-20240802-en
General
-
Target
b474787fa9150e8da9772812c6c8f374_JaffaCakes118
-
Size
70KB
-
MD5
b474787fa9150e8da9772812c6c8f374
-
SHA1
630f566ea6f1d1268c55047310624d3b0d4aed78
-
SHA256
dff879518c41d4c9e237dc0d33174676aade049feacf3ba89089f0b612d10354
-
SHA512
d68aab23360240dbd7a28ebfb837c9270e9376df7293a070df68f1bb7ada8e2686fed437328b5406d281e29f4bf99375d5f08da5fa360ef99138bb08cf65cec0
-
SSDEEP
1536:IGoAX1WznBiB8KHVZy18chBVOYnb+XF7Th+UxVy0oeAKRKxh13S:IhoWzBC8t2uBVOYb+XFHhFq2Uh1i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/TNT Original Invoice.exe
Files
-
b474787fa9150e8da9772812c6c8f374_JaffaCakes118.ace
-
out.ace.ace
-
TNT Original Invoice.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ