Static task
static1
Behavioral task
behavioral1
Sample
pago SWift pdf.exe
Resource
win7-20240903-en
General
-
Target
f5c9afcc50905b9670479f4fc959cc46_JaffaCakes118
-
Size
416KB
-
MD5
f5c9afcc50905b9670479f4fc959cc46
-
SHA1
771e672ffd89bcdd62b5fac8980f7b4f2b388159
-
SHA256
e4947b26c5306a3abf3699d57d332983f1fd64c7d0b676e49f6dfa8bafca59d0
-
SHA512
fafa361823738264586bc4019c70f7ac47325fa44258c1e9bdf1bd6fb9a9a81a952d57b35578aeb760d2d23135e62ec1290cbf06839d85485e9a40dea2309227
-
SSDEEP
12288:hGMruu5awjsK+/oSq+ZsDK/J9iNoJ/mFe38FHJKslXc1e7Tn:nS4VjsK+zPsDKdJ+FQ8F77Tn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/pago SWift pdf.exe
Files
-
f5c9afcc50905b9670479f4fc959cc46_JaffaCakes118.zip
-
pago SWift pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 606KB - Virtual size: 606KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ