Overview
overview
3Static
static
3051020sym2...��.htm
windows7-x64
1051020sym2...��.htm
windows10-2004-x64
1051020sym2...lp.chm
windows7-x64
1051020sym2...lp.chm
windows10-2004-x64
1051020sym2...��.url
windows7-x64
1051020sym2...��.url
windows10-2004-x64
1051020sym2.../c.exe
windows7-x64
1051020sym2.../c.exe
windows10-2004-x64
1051020sym2...nc.exe
windows7-x64
1051020sym2...nc.exe
windows10-2004-x64
1051020sym2...��.exe
windows7-x64
1051020sym2...��.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
051020sym20/051020sym20/77169.org˵.htm
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
051020sym20/051020sym20/77169.org˵.htm
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
051020sym20/051020sym20/help/help.chm
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
051020sym20/051020sym20/help/help.chm
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
051020sym20/051020sym20/ĺڿͬ.url
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
051020sym20/051020sym20/ĺڿͬ.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
051020sym20/051020sym20//c.exe
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
051020sym20/051020sym20//c.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
051020sym20/051020sym20//nc.exe
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
051020sym20/051020sym20//nc.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
051020sym20/051020sym20/ó.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
051020sym20/051020sym20/ó.exe
Resource
win10v2004-20240508-en
General
-
Target
74d16a923b10ccd33697854845452b10_JaffaCakes118
-
Size
517KB
-
MD5
74d16a923b10ccd33697854845452b10
-
SHA1
804f683703fc02d8d0213e4cd8003f1f7ebb699d
-
SHA256
f5e8f620c399de4b0cbb12b6e008a5365fda8b2dd61df6676ad3f245fc86cc97
-
SHA512
f00020782f1ea7414b93748ff990d0d9014fe6fedb3b132ee3105e6069226a7d349ff73111d87ff3f4ca135f948f2edbc22ad3b31369a568785ef346b0354d8b
-
SSDEEP
6144:zDWr7SHgdP70iAdIomaUmX5+osnxPNMgs3DiU2e/9JYOUP6uWBbXfKDqDxf:XWSqz07dIuU1o6xPFs31/9JYkBOGDxf
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/051020sym20/051020sym20//c.exe unpack001/051020sym20/051020sym20//nc.exe unpack001/051020sym20/051020sym20/ó.exe
Files
-
74d16a923b10ccd33697854845452b10_JaffaCakes118.zip
-
051020sym20/051020sym20/051020sym.jpg.jpg
-
051020sym20/051020sym20/77169.orgʹð˵.txt
-
051020sym20/051020sym20/77169.org˵.htm.html
-
051020sym20/051020sym20/help/help.chm.chm
-
051020sym20/051020sym20/ĺڿͬ.url
-
051020sym20/051020sym20//c.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
051020sym20/051020sym20//nc.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
051020sym20/051020sym20//˵.txt
-
051020sym20/051020sym20/ó.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE