Static task
static1
Behavioral task
behavioral1
Sample
PAID US$2380.exe
Resource
win7-20240903-en
General
-
Target
da3cb4449b0d38df5c78fdc589771a32_JaffaCakes118
-
Size
344KB
-
MD5
da3cb4449b0d38df5c78fdc589771a32
-
SHA1
348594d32f27f3afb56618269c990b583bf39871
-
SHA256
51e66da9edde893a5256802ac71b04360925d3b5cf5f61f8b46a70420400c182
-
SHA512
c9db32034cc02cfc1458999a2566f0e83d2c75d298ac04862cf516e0c9ec5f387b8761e9161da582954784ee7e9335e9a1f103d4074b9b6f59a0fafc936f9425
-
SSDEEP
6144:U0fvYAgXekqHDezyQWje1sraBVea7IaybZXwp51Sy7FWWASZ2xCw3mGigC:/QkB8yDC10a7f7CRo19WW92xCw3N+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PAID US$2380.exe
Files
-
da3cb4449b0d38df5c78fdc589771a32_JaffaCakes118.gz
-
PAID US$2380.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 429KB - Virtual size: 429KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ