Static task
static1
Behavioral task
behavioral1
Sample
PAYMENT DETAILS CONFIRMATION.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
PAYMENT DETAILS CONFIRMATION.exe
Resource
win10v2004-20240802-en
General
-
Target
d3c9458cd2f55265a139756dd79c5ac3_JaffaCakes118
-
Size
877KB
-
MD5
d3c9458cd2f55265a139756dd79c5ac3
-
SHA1
da9c18202cef635f45fa72f0435518a95b65ed4b
-
SHA256
d24c4c9b26b2dce1de2a0797c2e46fc5f58e342930d8ced675680a250fd22ba8
-
SHA512
adc0cb7aec64e59c6f941316e84182ee723be4d57a1c59e735058dfd61a1b110292484ccc70a72ef13a0ddad8b503334fa05fc758fcab20b855fb115ab22ec1e
-
SSDEEP
24576:CVsCLPd/gUYFzPU3K6yRR1/ZQGChLvdugS3VRNh0b4E:CjPGJsC1/ZQGCh5hGNh6L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/PAYMENT DETAILS CONFIRMATION.exe
Files
-
d3c9458cd2f55265a139756dd79c5ac3_JaffaCakes118.zip
-
PAYMENT DETAILS CONFIRMATION.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 989KB - Virtual size: 989KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ