Behavioral task
behavioral1
Sample
invoice.Pdf____________________________________________________________________.exe
Resource
win7-20240903-en
General
-
Target
fc95c557d8c347f4b85cfefd5e7d38b8_JaffaCakes118
-
Size
194KB
-
MD5
fc95c557d8c347f4b85cfefd5e7d38b8
-
SHA1
50afe72d3327c0760a6d5f9e3f902962bff330e1
-
SHA256
d56856ff93e71cdc16865468cf223b824ceb7519aef43c5ec33356ba87eb26a2
-
SHA512
0f257ccd2f97774f3f85ed7e2d598816be88297b36151eed8c109d78a90ab268f8c55e634f80b7cb2d7cfcb748a004958a34bf0c175311e3844841e5a3a58e4f
-
SSDEEP
3072:YzLKWikvfIl2F1h6ei2KWS+xYBrDngGdG79RxjsYULcz3V5weO6IGGmZvmsK/6gn:no1/5nKBHRNCh5wjeZ+sKBSIivoWgp
Malware Config
Signatures
-
resource yara_rule static1/unpack001/invoice.Pdf____________________________________________________________________.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/invoice.Pdf____________________________________________________________________.exe
Files
-
fc95c557d8c347f4b85cfefd5e7d38b8_JaffaCakes118.zip
-
invoice.Pdf____________________________________________________________________.exe.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE