Static task
static1
Behavioral task
behavioral1
Sample
155��ɫ����վ.url
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
155��ɫ����վ.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
HoleeBlurayRipper_setup.exe
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
HoleeBlurayRipper_setup.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
crack/HoleeBlu-rayRipper.exe
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
crack/HoleeBlu-rayRipper.exe
Resource
win10v2004-20240611-en
General
-
Target
1515ea13a139d563fb4b87ae13ed8e06_JaffaCakes118
-
Size
11.9MB
-
MD5
1515ea13a139d563fb4b87ae13ed8e06
-
SHA1
8a455125cf12c1160ef60eee73f17c9c2b338899
-
SHA256
2af2ad1b2239aac88b3e517f94ea927d01da652f926f36dae9b27257c8ffc0e2
-
SHA512
302d53e0c727155f7ac15844ecf74a9e38913bbc8fa28bb62dd145344ec1a7dbe3760763d84bdadc0b6de93d35dab8b6a5db7ebc676ca27c2a64d11de1a330e4
-
SSDEEP
196608:c3BD/7hCScGvS6Ys8XZkkpk8gtWwkQQYzbKoK+WOLO9XfxRwOG7JrlOzC84dPcw+:ct/tjms8XmkpklwwkQxzbRcxRzKMC8ci
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/HoleeBlurayRipper_setup.exe unpack001/crack/HoleeBlu-rayRipper.exe
Files
-
1515ea13a139d563fb4b87ae13ed8e06_JaffaCakes118.zip
-
155��ɫ����վ.url.url
-
HoleeBlurayRipper_setup.exe.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
crack/HoleeBlu-rayRipper.exe.exe windows:4 windows x86 arch:x86
0e7c3f50378d8343da6c39634a112ac4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ffencoder
fnStartFFEncoder
ffasf
?FFASFCMD@@YAHHPAUFFASF_CmdPara_t@@@Z
ffreal
?ffreal_cmd@@YAHHPAUFFREAL_Cmd_t@@@Z
avcodec
ord579
avformat
ord67
avutil
ord28
mediainfo
ord2
user32
EqualRect
gdi32
GetObjectA
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegEnumKeyA
shell32
ShellExecuteExA
comctl32
InitCommonControlsEx
shlwapi
PathStripToRootA
oledlg
ord8
ole32
CoFreeUnusedLibraries
oleaut32
SysFreeString
netapi32
Netbios
ws2_32
closesocket
wininet
InternetGetLastResponseInfoA
Sections
.text Size: 697KB - Virtual size: 19.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE