Behavioral task
behavioral1
Sample
JaffaCakes118_ff2532439dbbd2d9d7f90c1429b8a7abf35cc142a74d4d71b34ec381cc98fe1c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_ff2532439dbbd2d9d7f90c1429b8a7abf35cc142a74d4d71b34ec381cc98fe1c.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_ff2532439dbbd2d9d7f90c1429b8a7abf35cc142a74d4d71b34ec381cc98fe1c
-
Size
188KB
-
MD5
1bae385787dd3a803d3ee3c1bdef8499
-
SHA1
76c9b9923e8692a9c9a8b049df0a293fc64d9dc6
-
SHA256
ff2532439dbbd2d9d7f90c1429b8a7abf35cc142a74d4d71b34ec381cc98fe1c
-
SHA512
cb19c4d8a3b36baa4d17b85565abea180ed9dc41ee7ddadd7cb409a54ce65669b44782eba0c469d88730ebee3d2bb960c21d3185b95062879c5a8d817f48f1eb
-
SSDEEP
3072:IEIWa05Gm6AR0FtW3/i50ORBRriFvB3L6BES/YBLTl/Asdn1152inCKk:ILWT6K0FqDOfhMvFL6BEAYBLTlDPC
Malware Config
Extracted
formbook
avcn
iQqc+b5jHA+W
gCI4O82LSsNA9tLkneHk6qA=
3I2qv1ZVYff+1Eo=
1YmmfbWjsiHmYcYjSVTf
NBsHMXP19khOJt2KMTEHhw==
phGkJ+uyWGow/gNhAcfxpNU4GLuUgXFcOg==
76S4kOajAII72kw=
YuoJB0X0+/LJtxIjSVTf
dfwI3SsaGogqBAZ4xhUx4B2g+LiF8XoFNA==
DPZ6AvfogdqUiZUq5K+3Jqk=
hnICZyINthreqpPpaLz9gQ==
yVh1ZpxISCr6h8b+MA==
/8Tg3VE+R7A/Bte6oC7kz/g4mz8Ufa4=
Nb5SuHlc+kxwGO5Oig5THgechA==
/NLWvgr7IAXcxzuueX/s6wJXODEI
/niFcKdVbQHAqH2y
Gac4n4YyRhvRYuK6
RtRr4pSUsjjOu7qsuv9FFBTuiHQ=
u1p5bblp59M=
qmh/ZV4PTj/IiNezISd2YeWw
OytJIyQdrqsi7m1+w0DnHgechA==
pnKGf31wEhjRYuK6
/sRZ7b6DEpWbNB8u7Lo=
ZfusFJWY0sF3VehQFSB2YeWw
GQEc9xj8ALmIcaFKcbI=
N63JmIB6FAuYatG4Ky12YeWw
Y/oM545ahn1BIJGlJC0vmA==
hSQ98e3sgOCmfGCeGCZ2YeWw
hTxZQoQ4Oif2zuXFvwkz2Ws0mD8Ufa4=
MZwxv8QDB+SL
kR3PK7hq/FPFoAp7P1E156E=
KqbM38c7HCKc
ZyDDBphO+nLfpQJoLiZ2YeWw
8l3oTRsQmYgVDfgqpHh2YeWw
xGr+g5RCTvf+1Eo=
UiJES+TuCY0HxqvhaLz9gQ==
qlKwKsjVpbqMZdA07ro=
tZqxjKSBXj1m6UBqIyZ2YeWw
f0RbT0k2oJdTNZbGiZnRe72cMdJuoqY=
PuWO3V1SXvf+1Eo=
GMLNsatjHA+W
MZC5jMWKm2DVrHS0JCV2YeWw
oUvubC/lT/CAZA==
5IabgcKHwqMc4Uwsi5M+Mef1klAA
GfOM+3RshFEiCIPwvMwyWQC6
V+Jz47KPEQZ6USBXigxRHgechA==
Ugie8sS3YKUeq8rwKQ==
w1FwZYyFGBnRYuK6
+HEY0y08YRAV9WKZP1E156E=
COLu4k5TYPf+1Eo=
ZgkmM7fE6bB9Hcg0YKs=
dxKYApZRAGUAq8rwKQ==
z1vqdH0oSRuwhAiIxlE156E=
IOHv+EM6eWYp5fFfX6s=
oz1hQZOawZhvXtFq1aR6PeasvHw=
9XqNg9rU/MipiaFKcbI=
7I4tmFb/jxzxeagRR6DX
Ow4i+gq5sJZ4UVE7aLz9gQ==
8NrgwgbLuYdYMUA4aLz9gQ==
pFjuNDi9Uqceq8rwKQ==
VhYzA1JIX/f+1Eo=
fjYXhj7IBuDRYuK6
O8TR12YcvUICzbojSVTf
+eLxuLJmrwWzemjF/0xYHgechA==
suntechgadget.com
Signatures
-
Formbook family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_ff2532439dbbd2d9d7f90c1429b8a7abf35cc142a74d4d71b34ec381cc98fe1c
Files
-
JaffaCakes118_ff2532439dbbd2d9d7f90c1429b8a7abf35cc142a74d4d71b34ec381cc98fe1c.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ