Behavioral task
behavioral1
Sample
Disiples III Plus 5 Trainer - HoG.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Disiples III Plus 5 Trainer - HoG.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
HoG.url
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
HoG.url
Resource
win10v2004-20240508-en
General
-
Target
21a65076e4dc164d5d6481f18349f60f_JaffaCakes118
-
Size
312KB
-
MD5
21a65076e4dc164d5d6481f18349f60f
-
SHA1
5245901da882fc4a8a621a0ae81800b62f712e98
-
SHA256
cb69b1e11cd82a5d3d4e55b26cc7b6f9f5ad484bf4271f17e8cc6dfe0c85f62e
-
SHA512
d61e255cdbbf85170b2682ba0d223f4c125ec6c1310b94bab7737f3bc7b758bea75e42c486d2418e0b0e6a2bfd2da5811d0e670799d5083275e1994cdec2fab3
-
SSDEEP
6144:lK6Ul2CoxhqmqwR1W8tlWL+1Hc+AqSRgX4zP9CO/Ko0SyjmdPkwVDrQP55d0ka:tjhKaW8ugHBAtgX4hP0SmwprAGka
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Disiples III Plus 5 Trainer - HoG.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Disiples III Plus 5 Trainer - HoG.exe
Files
-
21a65076e4dc164d5d6481f18349f60f_JaffaCakes118.rar
-
Disiples III Plus 5 Trainer - HoG.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 692KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 361KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
HoG.URL
-
HoG.nfo