Static task
static1
Behavioral task
behavioral1
Sample
pdf_trk_invoice.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
pdf_trk_invoice.exe
Resource
win10v2004-20240802-en
General
-
Target
dcee4d8ef6b112cb3e3f45ecbc40b774_JaffaCakes118
-
Size
138KB
-
MD5
dcee4d8ef6b112cb3e3f45ecbc40b774
-
SHA1
afa6a705ca60ab6f6ef8104ac854aaeffcfc18e8
-
SHA256
e94cc64a8e19959cb1eb4822edc4fd412704f1bf3a2c7dee6cea86225973ca96
-
SHA512
b0092ba56718e62945a7c6f7c8ce1e8d379aee099316dff8c8f1bb625436d31c6286cf8eb439153d106b67d456885e2946c2b21ac5160512e74907cdf0f94c60
-
SSDEEP
3072:rENIiM/OA2mdewr7V2CmDpjhLu5BaNW/+zjWZEwZv5VR:r6I12WbkDdKgN/EEov5VR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/pdf_trk_invoice.pif
Files
-
dcee4d8ef6b112cb3e3f45ecbc40b774_JaffaCakes118.zip
-
pdf_trk_invoice.pif.exe windows:4 windows x86 arch:x86
2cf8ac5c4a27f74adccb0b2d6a82fb2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetConsoleCtrlHandler
GetLastError
GetProcAddress
GetOEMCP
FindResourceA
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
LoadResource
LockResource
FreeResource
GetACP
LoadLibraryA
HeapAlloc
HeapReAlloc
RtlUnwind
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeW
user32
SetFocus
SetRect
CopyRect
IntersectRect
SetRectEmpty
GetFocus
LoadBitmapA
LoadBitmapW
CreateCaret
LockWindowUpdate
ShowCaret
GetDesktopWindow
GetWindowDC
ReleaseDC
AdjustWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
gdi32
GetRgnBox
SetMapMode
GetTextMetricsA
CreateRectRgn
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ