Static task
static1
Behavioral task
behavioral1
Sample
mnpmjpCNGR/屏幕键盘.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
mnpmjpCNGR/屏幕键盘.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
mnpmjpCNGR/必看说明.htm
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
mnpmjpCNGR/必看说明.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
mnpmjpCNGR/河源下载站.url
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
mnpmjpCNGR/河源下载站.url
Resource
win10v2004-20240226-en
General
-
Target
6ee694044210a2e834570ece441adc8a_JaffaCakes118
-
Size
121KB
-
MD5
6ee694044210a2e834570ece441adc8a
-
SHA1
8925dca31b1b45d4e0a727aef83b123ca6a0961d
-
SHA256
cbec4376c8986d963fd4a7e5a5a4c2f6b4a994d153930a247acb7e361ca5dcc5
-
SHA512
89486ed4280b9ab2cb25cb989fe335aa712f4bcf96b668ce78cd836ef46e6855bc88c75e717040e944f2c0157529991ceb1554081ba216546e9c581677cedc62
-
SSDEEP
3072:P0Oi16gVnjciP6tK1i2Lj2oD5LnI7HOqCd0t2uYHecUeFn:PNi15VnjcOwp2Lj2oD5LI7XjYB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/mnpmjpCNGR/屏幕键盘.exe
Files
-
6ee694044210a2e834570ece441adc8a_JaffaCakes118.rar
-
mnpmjpCNGR/屏幕键盘.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 121KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
mnpmjpCNGR/必看说明.htm
-
mnpmjpCNGR/河源下载站.url.url