Static task
static1
Behavioral task
behavioral1
Sample
PO279476798.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
PO279476798.exe
Resource
win10v2004-20240802-en
General
-
Target
c98bc8078524b4f7dfeff94d17b22109_JaffaCakes118
-
Size
532KB
-
MD5
c98bc8078524b4f7dfeff94d17b22109
-
SHA1
9e226689cb1539e702dfee64f714451c4d6e40c2
-
SHA256
62f4cca09be2d3acfb07f17bd628ac1e73db2e56bf5b271bba29c60dbd8b6b68
-
SHA512
d81fb4d8995a97dd7fa569d2861c0a1cfd26159de5a0494ad2b66449ca5b70bf2ee0dacc45085887c149cfe197d1ed57fd0a0c654392ff7df8bcbfa31f6d7e2f
-
SSDEEP
12288:IERn//lKVRcrzJAMD/1EdgV6Ge9CuyZFpWLo8n7x85HX:IEp/NKnc3PNEdgfeVeXWLruX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO279476798.exe
Files
-
c98bc8078524b4f7dfeff94d17b22109_JaffaCakes118.zip
-
PO279476798.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 547KB - Virtual size: 546KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ