Static task
static1
Behavioral task
behavioral1
Sample
Scan Document.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Scan Document.exe
Resource
win10v2004-20240802-en
General
-
Target
e794524e1b45cc7ddc29fb4c45c360ae_JaffaCakes118
-
Size
376KB
-
MD5
e794524e1b45cc7ddc29fb4c45c360ae
-
SHA1
e5049672ced5ba2317f20387c02f040490a0adce
-
SHA256
ea105dc94b4189edab2ab9b3acb7f54bc499d748b0aa5660e3e6e886996c9d75
-
SHA512
38e34eaaa1baca27d3f4f2f933be58f5ed79c48629ee7f3120b413eb36d0f9d52b2657157c8e9179a2afc89afad6d4e962bd8f91524e4ce7a4e7feba113f68f9
-
SSDEEP
6144:nHabKEezxgf6T9aPcXZdwnE4vIcXpzQ7Y8uLblbh8uVqXEghYV+Td+t9BgJV:HabKE2W6T95ZH4NBCYRblbuuVq0g+t9e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Scan Document.exe
Files
-
e794524e1b45cc7ddc29fb4c45c360ae_JaffaCakes118.ace
-
out.ace.ace
-
Scan Document.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1011KB - Virtual size: 1011KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ