Static task
static1
Behavioral task
behavioral1
Sample
Copia de transferencia bancaria.exe
Resource
win7-20240729-en
General
-
Target
JaffaCakes118_7db35f373ff7a17469cf0e111a7ca2bc76bb172afe87d69e7ccfae173e7f6701
-
Size
764KB
-
MD5
94fb3c23dc1b3e626e2422ec0c72fffa
-
SHA1
fe1ae95bcad3d64c953debf5f577f8706d96ce6d
-
SHA256
7db35f373ff7a17469cf0e111a7ca2bc76bb172afe87d69e7ccfae173e7f6701
-
SHA512
2ffb84288834599e6eaf5b2019391220ea5aea00cc06053c0277094657c63d9d122be08b52b6f5e3f3f43e401348905aa560a3071ba29ee60dd98a28a1be3aba
-
SSDEEP
12288:Squ4acuJI8ew9N3diIwVzt8PvQqvfdcENLCrT8+90KP9hKhAO7dUBH/472nnqgt9:Ssa6Pwn3diIwVzt8FdPCf8g0KJGdQu2l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Copia de transferencia bancaria.exe
Files
-
JaffaCakes118_7db35f373ff7a17469cf0e111a7ca2bc76bb172afe87d69e7ccfae173e7f6701.zip
Password: infected
-
4fdde446b69472d51d0dc8f9fe9c0c621188676e47636e99cbfd3a09a4068358.zip
-
Copia de transferencia bancaria.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 969KB - Virtual size: 969KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ