Static task
static1
Behavioral task
behavioral1
Sample
ճǹQ3.0.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
ճǹQ3.0.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
μQQռ.html
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
μQQռ.html
Resource
win10v2004-20241007-en
General
-
Target
3798501fb957dab6acffd3cd800a633b_JaffaCakes118
-
Size
676KB
-
MD5
3798501fb957dab6acffd3cd800a633b
-
SHA1
b721c8da0ec5f22c65ee5e61070df47fbd859286
-
SHA256
8ee62a8904c79a6676a7a81b7ac4a7ffc6f942f0e681f1b2a59ad9fba32d8342
-
SHA512
ef20f733019a797a0ef2bf17b65d0c0e0e0767db2e0a620cd70fdb297c86691a57b1607aaea6d55041b70c72a8377410b6a19806e57154ad204dadf9e03fb0d7
-
SSDEEP
12288:b3cRPNMgIHF8D7TeqrUcLoPCosWzVAnDaFppZS6H+ywVs8fNkdLwbKfvml23Rksq:b3cvIOXTeqYcLoIsi8LHwVFf2dwbNg30
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ճǹQ3.0.exe
Files
-
3798501fb957dab6acffd3cd800a633b_JaffaCakes118.zip
-
̳.txt
-
ճǹQ3.0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Esp0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Esp1 Size: 671KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Esp Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
μQQռ.html