Static task
static1
Behavioral task
behavioral1
Sample
PO 05252022.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_bc649578550eaf985a4f3432ee1d0f8f67098d0070956e6d2b3e72d327886be1
-
Size
673KB
-
MD5
3de01cfc88a28b450933fd1df1afdbf3
-
SHA1
35a4c40afac70bee10cf94e407a99610d8f2fa9c
-
SHA256
bc649578550eaf985a4f3432ee1d0f8f67098d0070956e6d2b3e72d327886be1
-
SHA512
98977848eb9351ffff7da4ce7a449159cc34ee6d70ec3a354775b6287324d18569238849a7b019932b033ed470d9c5fa380e4df9a1fb88ca3fa5bb0a0648ffce
-
SSDEEP
12288:BDVHmvEYKaqOA9PysodZV4teOvkS1bUsXoh2KzLChCWlPxuVinaP1Db6qY+1w10j:BD9mmO+ysa3m/Yh3PfWlPUVinKD21+1z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PO 05252022.exe
Files
-
JaffaCakes118_bc649578550eaf985a4f3432ee1d0f8f67098d0070956e6d2b3e72d327886be1.ace
-
out.ace.ace
-
PO 05252022.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 721KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ