Static task
static1
Behavioral task
behavioral1
Sample
ftcsetup_vista.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ftcsetup_vista.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240802-en
General
-
Target
acfe16eaa150c20be68900f26af84a02_JaffaCakes118
-
Size
27.5MB
-
MD5
acfe16eaa150c20be68900f26af84a02
-
SHA1
dffa42850a65d01b26d0c58f7f9e2460e52780d1
-
SHA256
88ceb26c8f0972a2698dedb501eb31f9ac4915ddf3c09a281984ee140c1fd496
-
SHA512
ea589933689e9f9a0c58bbc46e0bcb82a47b89a30f27eb17e1d77e2f80327d3c70e1c2bf6c371aa3c26f8fda34bbb9b4aa38eca749aa21e312b07d7f01ae7b1b
-
SSDEEP
393216:/hcnM0V+ECHx9P9XbdQxhR/VpgJoZFa0iWzOzeCUy+bp4StdOz6anxtN5+8htjS:/h52E9L0hRt8otbq6CUw8Az6mtj+8htS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ftcsetup_vista.exe
Files
-
acfe16eaa150c20be68900f26af84a02_JaffaCakes118.rar
-
ftcsetup_vista.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
新云软件.url.url