Static task
static1
Behavioral task
behavioral1
Sample
???www.xzking.com.url
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
???www.xzking.com.url
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
pepsky-video-editor.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
pepsky-video-editor.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
readme.url
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
readme.url
Resource
win10v2004-20240508-en
General
-
Target
b1c753fdecf6436bb1babfbe93aa3f7a_JaffaCakes118
-
Size
20.4MB
-
MD5
b1c753fdecf6436bb1babfbe93aa3f7a
-
SHA1
8d533c653a855f5914b1bd3418cb00f7043d025a
-
SHA256
e95293ce6fc087a23cde4ed148ace6ecae420442803744ffe5cc7494bb608263
-
SHA512
d0c95f674a998c33bc109f4d4c90548456da31aebc9bfe7a22c3eb88a26ecbe520c845137022d4bc82bf27f5cd93c060bd51a1a552e6ffa1f24fc206d2266257
-
SSDEEP
393216:3CZjV14CymRlGUZPrkXiykUf/aGjVdX8+e/C6FBohW7pFKUotPOdknOjVd:cjPfTGo4MUf/aGzXbVDEKnij
Malware Config
Signatures
Files
-
b1c753fdecf6436bb1babfbe93aa3f7a_JaffaCakes118.zip
-
???www.xzking.com.url.url
-
pepsky-video-editor.exe.exe windows:1 windows x86 arch:x86
Code Sign
c1:1b:46:ec:fa:03:f3:ed:49:b1:03:2a:1d:d3:b7:34:78:e8:82:feSigner
Actual PE Digestc1:1b:46:ec:fa:03:f3:ed:49:b1:03:2a:1d:d3:b7:34:78:e8:82:feDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
readme.url.url