Static task
static1
Behavioral task
behavioral1
Sample
upskirtsniper.com.06.09.16.hotel.imageset-hawt.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
upskirtsniper.com.06.09.16.hotel.imageset-hawt.exe
Resource
win10v2004-20240704-en
General
-
Target
47dbc26d1226b77a438617341f0348bd_JaffaCakes118
-
Size
309KB
-
MD5
47dbc26d1226b77a438617341f0348bd
-
SHA1
527f51449eab52983888a090610adb8ffea03119
-
SHA256
1b9a24086e0feeaa925a217e8edff10c33868b64f216f9c51265185a06752dd1
-
SHA512
66e301078ebb16dccbc78ef92568b34774f8bdb1de0418d30c67fc30be08e96982c54e30378c432db91f0969f73fb0961e15a7755662e545df6869762d0ba27d
-
SSDEEP
6144:gF+Qnw3cvJgCKxdl13UJ8kgBOdVmOly0XX88QoS7+lAVom1l5n:gUNgJUxC8k/7X88QoS7fD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/upskirtsniper.com.06.09.16.hotel.imageset-hawt.exe
Files
-
47dbc26d1226b77a438617341f0348bd_JaffaCakes118.rar
-
upskirtsniper.com.06.09.16.hotel.imageset-hawt.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
qpha Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sqtf Size: 235KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE