Static task
static1
Behavioral task
behavioral1
Sample
qEXWFLwvzmhOGhN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
qEXWFLwvzmhOGhN.exe
Resource
win10v2004-20240802-en
General
-
Target
d8b0efb484f4c39789eaa4e7c5de0884_JaffaCakes118
-
Size
1.1MB
-
MD5
d8b0efb484f4c39789eaa4e7c5de0884
-
SHA1
a842aaabdc816d2055cb1b0a50ddcfc593410d97
-
SHA256
ea0228d4e1934f5985060ebb6467809a6823c86d63b069059f900ea5c8472aaa
-
SHA512
6454137ef1832a1d128ed1fe541fb87f3a8250df130a0636b864364435ca4281e31e9bccc6a960cf82e2e3885b870d150bc00783e498441f462c019d02c5379e
-
SSDEEP
24576:1q1QvWAAAbasIRxSLw53KsuiR1x22w2DHxw+G:k6upyIR8Lw53Ka1x225DHO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/qEXWFLwvzmhOGhN.exe
Files
-
d8b0efb484f4c39789eaa4e7c5de0884_JaffaCakes118.gz
-
qEXWFLwvzmhOGhN.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ