Static task
static1
Behavioral task
behavioral1
Sample
RFQ#F44E0741.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
RFQ#F44E0741.exe
Resource
win10v2004-20240802-en
General
-
Target
fe6ab566f9e007c7ca1908ffcb935889_JaffaCakes118
-
Size
288KB
-
MD5
fe6ab566f9e007c7ca1908ffcb935889
-
SHA1
38d52a66763bca7c7f3fb7cf9e17c91f27825109
-
SHA256
da62bcbaf979d67943395094d8cd54a2f02041a0edd3822ce83c46f4ca52b2f7
-
SHA512
7110e44c7648c877828e2eb053078cd07354b7a18c47de28cff58a6da5487cf28ecf56fe31d6bea5df8ddec0a52ad5e0e5e65dc085b879c8cc6c09ec8ec7afb3
-
SSDEEP
6144:2AmcnRioTphnZ0O+FNpVsEtAbry7DxcjFoPfqhm4j42T2Dv+Pqkq+GGEx:2oRzLZ0OktAXy76ZoPb402TaW7wG4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ#F44E0741.exe
Files
-
fe6ab566f9e007c7ca1908ffcb935889_JaffaCakes118.rar
-
RFQ#F44E0741.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 434KB - Virtual size: 433KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ