Static task
static1
Behavioral task
behavioral1
Sample
Jagtap Trading - order #JEW-39-16.02.2021.exe
Resource
win7-20240903-en
General
-
Target
ea563179bb92c04b05ee2e20b43dd960_JaffaCakes118
-
Size
342KB
-
MD5
ea563179bb92c04b05ee2e20b43dd960
-
SHA1
bae1357c85c933f933cb1c3fbc906bb1e8f0ca72
-
SHA256
d357a2232ad73608f19ef5985d107513da9fc9de1d2e77f77ca259099742b913
-
SHA512
53a5454cb08a9387cc6c5a8b41fbbc55e622ba4a116e66964e12b8919d1c96c054ada46dc8480aff93d4884e0a85199be9e79685b404b612d1230c358744735a
-
SSDEEP
6144:keln+8hieXtkSqkIA/2rtj9QCoCue1P2+ovl7rdN84Zrr5wFdkOR:pl+4ttkSgAerN91oCue1PU9LvrNwFdkm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Jagtap Trading - order #JEW-39-16.02.2021.exe
Files
-
ea563179bb92c04b05ee2e20b43dd960_JaffaCakes118.zip
-
Jagtap Trading - order #JEW-39-16.02.2021.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 537KB - Virtual size: 537KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ