Static task
static1
Behavioral task
behavioral1
Sample
Dealer police Journalist & PL rate reveiew.exe
Resource
win7-20240708-en
General
-
Target
JaffaCakes118_7a830132ac306920922244bc077bce30
-
Size
379KB
-
MD5
7a830132ac306920922244bc077bce30
-
SHA1
08139f389fc4e9566e9fa7c6625d15372df11066
-
SHA256
c730a71afd732dd54907e2139585271e826eb1333a960b17d50e4d3baab0c090
-
SHA512
28edb4a69aa261b2acec0c0880bcf1e4a18d565513c47eef341602aabb14868253902370827992a9c6f577130e054139b446c2744b49ed552866d8461547072d
-
SSDEEP
6144:80rNb5SOmlvbRzJvzspZBtGVZkroV1wfBazc/9NkSAJQN0MYT4qZf:805b5SOmlvdz2pEyMV1yBaCNAyyfEqt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Dealer police Journalist & PL rate reveiew.exe
Files
-
JaffaCakes118_7a830132ac306920922244bc077bce30.zip
-
Dealer police Journalist & PL rate reveiew.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 360KB - Virtual size: 357KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ