Static task
static1
Behavioral task
behavioral1
Sample
porchasegpj.exe
Resource
win7-20240729-en
General
-
Target
c8a4b78e2567fc6ed745adc3ec2e1f00_JaffaCakes118
-
Size
1.2MB
-
MD5
c8a4b78e2567fc6ed745adc3ec2e1f00
-
SHA1
09da39a7216dd9b343a172abad78b8d59589812d
-
SHA256
c3456f02a4372b8b702cf8661d009098a9e493211e59e9489d215d734146c7cc
-
SHA512
3195daa45f08206eae211f5499727832b9dc6c161722c116f3920d671a80131bb59f6675f47ab9d42ac15e2e7d6aead44c2c5a76718fb7dee3ad7f643fd7057c
-
SSDEEP
6144:uw6S2j8oB7ZOFANWfPs7Wmt5uaBMvl+D3IWTshF0po7:uwmh7Zsd1mtAaBMNh9hF0p0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/porchasegpj.exe
Files
-
c8a4b78e2567fc6ed745adc3ec2e1f00_JaffaCakes118.iso
-
out.iso.iso
-
porchasegpj.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 463KB - Virtual size: 463KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ