Behavioral task
behavioral1
Sample
c07d9e71aacaaa9022d36a58134785a7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c07d9e71aacaaa9022d36a58134785a7_JaffaCakes118
-
Size
531KB
-
MD5
c07d9e71aacaaa9022d36a58134785a7
-
SHA1
64b73c36df80274be9d062c11775c8b56d78a96b
-
SHA256
304339d4b80c079ab4bcf379c5d89348efb11fa99bfd03e3e9ee2f4df43dfd41
-
SHA512
ccf894bd60c598b3279c6167d384ca2a958f717008d018a1777331a0bf2f56c84813f1498ea6fb5b93aa170e26c114ac693ccc38490bb716afebaeaae174ef70
-
SSDEEP
12288:EachqEbC3hAXk8CCGdzy/AVCj2gLMw4zYnokfTEX13f:0jchA03dzy/AqoYnowTEB
Malware Config
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
resource yara_rule sample family_quasar -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c07d9e71aacaaa9022d36a58134785a7_JaffaCakes118
Files
-
c07d9e71aacaaa9022d36a58134785a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ