Static task
static1
Behavioral task
behavioral1
Sample
SKBMT_ Bank Transfer Notification 9880B904_ PDF.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_e9062b389f195ee7e6069dc65455ff755d58e89879c16a853dd5095ba290d8dd
-
Size
630KB
-
MD5
3e6c4e69e2525a15778e03e078e58d98
-
SHA1
4821c208e7b2e87c7668a9fe8c145725d107c2e8
-
SHA256
e9062b389f195ee7e6069dc65455ff755d58e89879c16a853dd5095ba290d8dd
-
SHA512
755a89e83a73f4595fe719ae2560aa5c8584b30d50a9132eb5cbb1f0a792a5d1c486ed2965039d626866a777830929618dc754adcc4c071d9531e7a595849173
-
SSDEEP
12288:/tSQ/nVpWXX5DreifLGQbbv3NDOsnJ3FDKhYF5Sz29dlLGbL57eLrKE:lSQ/nWYetbZBn++SzMQyvKE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/SKBMT_ Bank Transfer Notification 9880B904_ PDF.exe
Files
-
JaffaCakes118_e9062b389f195ee7e6069dc65455ff755d58e89879c16a853dd5095ba290d8dd.zip
Password: infected
-
da2cd41474fb3e66512934df0830d7cac4a6590d23c495fc22aeae4f02de75c9.iso
-
out.iso.iso
-
SKBMT_ Bank Transfer Notification 9880B904_ PDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 819KB - Virtual size: 818KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ