Behavioral task
behavioral1
Sample
de699317c9d2db2da98c942cade77604_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de699317c9d2db2da98c942cade77604_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de699317c9d2db2da98c942cade77604_JaffaCakes118
-
Size
267KB
-
MD5
de699317c9d2db2da98c942cade77604
-
SHA1
c19f2d831cf1b968ddf234ae6f05a8835e083fae
-
SHA256
5a4ce5aaa5d75395a6f1f8bd61596f6b6dfaeaeb435fefd1155c0fbf35bd26ef
-
SHA512
29e2ecbfdfb5f5579df77ea93fa94f14c2af8dc89fa03faf77714a25850942a599e20729e4c23606755bfdce45d0b1acaa269df862dcd767a749f666924f7a6b
-
SSDEEP
6144:FaaXMzUmOZoqsEhLU020djbhRFRR5daPa4Sj:cachqsv020dv31QW
Malware Config
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
resource yara_rule sample family_quasar -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de699317c9d2db2da98c942cade77604_JaffaCakes118
Files
-
de699317c9d2db2da98c942cade77604_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ