Static task
static1
Behavioral task
behavioral1
Sample
SOA.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
SOA.exe
Resource
win10v2004-20240802-en
General
-
Target
d6a5e38dd7edc20fa44ad2b0387dfa66_JaffaCakes118
-
Size
523KB
-
MD5
d6a5e38dd7edc20fa44ad2b0387dfa66
-
SHA1
6ed44161238f8889d5d151e401479c9b25016158
-
SHA256
7600f172b159ad55d68fe7a0e9f6fe7860926a9b5d6b3aadeb7c2de2a5354a26
-
SHA512
ef2f69f12ff6d026fd40c99f340109911f71467d711e86ac8ae472edd0ddc8a1d8a327b0cd78f4447ed1b5f8e9595e5cb585a52acc04e01ec71a61bb71d48ccc
-
SSDEEP
12288:GJK5gGn95ynyPb4gvB+0nGmck7+jSdRUlWLNbr+pgB4B6nstcXto4:GJ4kwvp+EBc9mwwYg2Ltc/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SOA.exe
Files
-
d6a5e38dd7edc20fa44ad2b0387dfa66_JaffaCakes118.rar
-
SOA.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 643KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ