Static task
static1
Behavioral task
behavioral1
Sample
RFQ and Company Profile.pdf.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
RFQ and Company Profile.pdf.exe
Resource
win10v2004-20240802-en
General
-
Target
d577f676fbfdcda0e1f513c728db4364_JaffaCakes118
-
Size
238KB
-
MD5
d577f676fbfdcda0e1f513c728db4364
-
SHA1
f480768cbf615d03733db7f615e2cbb630948bdd
-
SHA256
f70ad1f7b9542c417986653f568b199897b5f0a93e2e112d7cbad305dcbeacf7
-
SHA512
02576bf9a399c4fdecd4d79f06fd70ea5bc1122cccd6310abd8ceb55c7ea0098f63701cdbb49974a83c2ce6c0eb12206124e2560422acfe453b90da68a274a34
-
SSDEEP
6144:Mg1av94JB7dAn8dJzCuoJmt2wG3vYRoBbKxb5ygfGk:z6YB7K87zCuoJmtovHI2k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ and Company Profile.pdf.exe
Files
-
d577f676fbfdcda0e1f513c728db4364_JaffaCakes118.cab
-
RFQ and Company Profile.pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 359KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ