Static task
static1
Behavioral task
behavioral1
Sample
qqxwxyxz/QQȫǿ1116.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
qqxwxyxz/QQȫǿ1116.exe
Resource
win10v2004-20240426-en
General
-
Target
13d58a3a7df11e64e7c80fc2d8637da5_JaffaCakes118
-
Size
1.5MB
-
MD5
13d58a3a7df11e64e7c80fc2d8637da5
-
SHA1
673badd52427ffa743ad054eb9a8e47df56293a0
-
SHA256
acf9886a38c9cb81b5dc1c298485106118ab2adde591574062e3656779039a90
-
SHA512
8b005a55834038d473975a25bf28744bab1d0dd6845cd557727411ade1fb6f04be68758e817cd09b721703c1c69ead9be8d4a449c8c6c496e3348b7e90cf2a7a
-
SSDEEP
24576:Cr3lvtNvbUQF/gyTyXSiYMvg7efLnKesx36eOeJXhr15mcTYa+HOON3cdJ/Ftx:W3dIWMvgMLKeU36eOeJ75+a+HRudhx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/qqxwxyxz/QQȫǿ1116.exe
Files
-
13d58a3a7df11e64e7c80fc2d8637da5_JaffaCakes118.zip
-
qqxwxyxz/QQȫǿ1116.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 736KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ykwzahte Size: 820KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hsetqhfo Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE