Behavioral task
behavioral1
Sample
41bca0b1de92c162838eb324d047563b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41bca0b1de92c162838eb324d047563b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41bca0b1de92c162838eb324d047563b_JaffaCakes118
-
Size
74KB
-
MD5
41bca0b1de92c162838eb324d047563b
-
SHA1
142ca54bef72fcedbd0bea81054966feeb912576
-
SHA256
2eacf1b6a5a9477bb5a968bec79f11adecacd0b9a9cce83d7fd3c93adf4e3069
-
SHA512
bd8aa76b612064dd25c44372011db14d5705811cabf2c6c725a05b4ca142d5e4f20f6d0a43e47dd994d8852b066035e5b98acad287ee6d448273fa5a8a857399
-
SSDEEP
1536:x0/5u5fejAeXpmFM0pJAvckOXw72AtY4fAcK:C/cfpesFM02BY4fs
Malware Config
Extracted
purecrypter
https://store2.gofile.io/download/56e43684-e752-4269-bee5-fa1605761a88/Avquon.dll
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 41bca0b1de92c162838eb324d047563b_JaffaCakes118
Files
-
41bca0b1de92c162838eb324d047563b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ