Static task
static1
Behavioral task
behavioral1
Sample
RFQ 096300.exe
Resource
win7-20240704-en
General
-
Target
962ce6ed6729ab481d57a8cfbf65d40c_JaffaCakes118
-
Size
288KB
-
MD5
962ce6ed6729ab481d57a8cfbf65d40c
-
SHA1
28325a77879688c1c1217d6210ba3cdd660d0227
-
SHA256
887d43981d30c6d7a65e5b281434bf3796fee6f154ff4bd2ddabad64310d9c06
-
SHA512
5457467d1df4cbe2468a996af7fe8794e5dcc8c21ba2f28c249a1fb85eaac360611e786589bcdaff3b3f2063c4fe8417857ee9cbdc9491f5a59c18ee70720a7e
-
SSDEEP
6144:SneM15TO1b470Tddou2vUgfBZMRbCjN6SDLqZkNje:SnO1OI00gfPMEjN6YL4Yje
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ 096300.exe
Files
-
962ce6ed6729ab481d57a8cfbf65d40c_JaffaCakes118.zip
-
RFQ 096300.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ