Static task
static1
Behavioral task
behavioral1
Sample
jzqt.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
jzqt.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240802-en
General
-
Target
a91b1df34c046fd3b1f5108f81b81b8e_JaffaCakes118
-
Size
958KB
-
MD5
a91b1df34c046fd3b1f5108f81b81b8e
-
SHA1
4a213a5ab972260e30b1df9972f105cc302311a7
-
SHA256
8efb8cd16bfe645fa328b3daa276d50a4521461309c4485ba9a00fbeef222a26
-
SHA512
9561f7bfc0ec8c0f4800685e5ebce53687b7c88fedbfc074c595e79f6f6ce285968e06b5e40a639d295c16e539a3681791c73a2e59c648c4c77af027bd6457d1
-
SSDEEP
24576:2maV9Hi2SACqFeVfy/GXxNvV5DLKoP47CQm4cJtPyQ2+Qn:zaX7SYFrQNjWoQ7CJ4UKV+Qn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/jzqt.exe
Files
-
a91b1df34c046fd3b1f5108f81b81b8e_JaffaCakes118.rar
-
jzqt.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
新云软件.url.url