Static task
static1
Behavioral task
behavioral1
Sample
proforma invoice.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
proforma invoice.exe
Resource
win10v2004-20240802-en
General
-
Target
dfcf3dc44676f51e3ebc126cdb7f5e12_JaffaCakes118
-
Size
368KB
-
MD5
dfcf3dc44676f51e3ebc126cdb7f5e12
-
SHA1
a225961801d1fc19ca04249f1aaad244e217532d
-
SHA256
b50a0633963a8ae9cfd05db3af16c16584c55d707a5dac3633cb5318fca4b6d2
-
SHA512
e7ffa923b40d977feda0b4c18cbef2ee58a325efb2dd8eaa769eea0fa91b57975a8d9cf381e795b9e8348a82574a519aea84b6108b6310a6ac31dad2210afcb5
-
SSDEEP
6144:XN7KSt9fM5zqMn8pX14YqNO8xZcMP4BnoCf3bKMhxwbKNKXAijI6JAGK9SXeA:XN7Xt9f4qM8rb8DHPxCf3/PGKNKQcI6f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/proforma invoice.exe
Files
-
dfcf3dc44676f51e3ebc126cdb7f5e12_JaffaCakes118.zip
-
proforma invoice.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ