Static task
static1
Behavioral task
behavioral1
Sample
leylaty-RAK-16.02.2021,pdf.exe
Resource
win7-20240903-en
General
-
Target
d2eb19707d30018ecf87f0d198d72fbd_JaffaCakes118
-
Size
663KB
-
MD5
d2eb19707d30018ecf87f0d198d72fbd
-
SHA1
df4cf459adb8072b4d413351b94ed2afba800f92
-
SHA256
bc311f2845a756c0ff57e94abac7f894e60338ddc08187324154005d45c32456
-
SHA512
02df175005cbef12e364769f219942e36d1447f9206713b73501bfd3b435df0c673f5263fe85c7b6c6506c81af31556d1e072e0ac5523efa620777a43213967e
-
SSDEEP
12288:AlwUFxnPNsjoFhnFs7oXwkpvdv9DmfhTkqzG6tYt3NYgUGpWbAHxrGysz5jSgXYC:At/NmoF3s7YwA854qp6t9LUW1Hpg5jtR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/leylaty-RAK-16.02.2021,pdf.exe
Files
-
d2eb19707d30018ecf87f0d198d72fbd_JaffaCakes118.zip
-
leylaty-RAK-16.02.2021,pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 919KB - Virtual size: 919KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ