Static task
static1
Behavioral task
behavioral1
Sample
order.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
order.exe
Resource
win10v2004-20240802-en
General
-
Target
fe9c50bc297b2d678050226a23b02442_JaffaCakes118
-
Size
712KB
-
MD5
fe9c50bc297b2d678050226a23b02442
-
SHA1
4adb854d3c46f1d952e99c244c52c3a952d66967
-
SHA256
7b0a23e523d1947d62a47bf8260d031a5ef93fd54bc0ada0cb2b0aa43d7df918
-
SHA512
125313b4fcf4e1bbc2897e5e1ec98a9593290a80013a73aca25e9fb1d096ac1965708170e5dafc69bcccf1f97ecd805112221fb76a630a6fa1b4edc25e6e3bbb
-
SSDEEP
12288:Tk7g5+rgIAcK5N8+vifZhHDAtflk+a4m+M7VTPtjT67K5K3tAegdVSBzLyo:o7g5+r7k8xhhHDclk+aJz9pyj0Geo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/order.exe
Files
-
fe9c50bc297b2d678050226a23b02442_JaffaCakes118.rar
-
order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 816KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 235KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ