Static task
static1
Behavioral task
behavioral1
Sample
APKYUPOKSJ09HJSA.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
APKYUPOKSJ09HJSA.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_2f008e82dff5d835237221d923e390e7e8d32a3e77f7a417c2713601522738c1
-
Size
104KB
-
MD5
66b4d813664b8b8de02a3d6c0cc3da79
-
SHA1
fe9d81d10a4f3e4c6ca1685da63c6ce349e1f576
-
SHA256
2f008e82dff5d835237221d923e390e7e8d32a3e77f7a417c2713601522738c1
-
SHA512
822441e66aea92680b811f2e3a4be2c4dc9ededa6789d2fb9a2d801f163c449c6ccabe2c4ecc3129117ced68604c142c0470517830340db1e89b4be898b75ede
-
SSDEEP
3072:yaq4YpijXng1CBgCVdA2uUvn6V+SKxrSJ7l:yRm31Bg8dA2uCnxSkcB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/APKYUPOKSJ09HJSA.exe
Files
-
JaffaCakes118_2f008e82dff5d835237221d923e390e7e8d32a3e77f7a417c2713601522738c1.zip
Password: infected
-
ce58821897cb307a6f5d4b9332594310ef9b5ae80574e2ca0c886015b760e3af.zip
-
APKYUPOKSJ09HJSA.iso.iso
-
APKYUPOKSJ09HJSA.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ