Static task
static1
Behavioral task
behavioral1
Sample
Shipment documents for Order 20TDD67 440HQ BLMYRHBL009676 ContainerSKIU3444367221.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Shipment documents for Order 20TDD67 440HQ BLMYRHBL009676 ContainerSKIU3444367221.exe
Resource
win10v2004-20240802-en
General
-
Target
cc4374df21f2220a4103014c9ce37254_JaffaCakes118
-
Size
271KB
-
MD5
cc4374df21f2220a4103014c9ce37254
-
SHA1
5e2d1a50816e31694e8e63d4963d76d284e86c84
-
SHA256
5ea4590f0cde8f015458b9f772a506074c44678670dafa32b49848590c2a4b3a
-
SHA512
1dc093872d962ce863b5d16f8033d69758764cf9bb43fb7365054663fa9dbf444eca9e98fd764bb1fd94e3b202ead954e1591af8f32b751a2831a197a95f4f27
-
SSDEEP
6144:r52Rf3isqXtvjzclieWTx7nujkQ+ALJBdWROWIw0Ls42+CHkr+fvq9sc4uXt:kRvgXtncl10LQ+UJaOWf0LsLhSmqsK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Shipment documents for Order 20TDD67 440HQ BLMYRHBL009676 ContainerSKIU3444367221.exe
Files
-
cc4374df21f2220a4103014c9ce37254_JaffaCakes118.rar
-
Shipment documents for Order 20TDD67 440HQ BLMYRHBL009676 ContainerSKIU3444367221.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 430KB - Virtual size: 429KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ