Static task
static1
Behavioral task
behavioral1
Sample
ha_verypdf2word-v3crk_cz.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ha_verypdf2word-v3crk_cz.exe
Resource
win10v2004-20240508-en
General
-
Target
22f3f962b3d41524dd2bbce341b1569a_JaffaCakes118
-
Size
5.1MB
-
MD5
22f3f962b3d41524dd2bbce341b1569a
-
SHA1
cd91b87bf90cc5199316a34508a890c0729ce2b1
-
SHA256
ff3d68d376db405e52035c0d9dd2ad78195e930647cb7026b8b4ec2d8c10f24f
-
SHA512
fa31315691bceb33ec30c69f4ee152cd5fecbc350953d34e0c8300a2b1430095be7f87419066f303779b9c577730d77fffdb292ceb8364f6c4954b8a5cb3cdc2
-
SSDEEP
98304:pm01yI2vUZuYJGvOwpFmnmHTv0eMfkCz6quHZtWH8nT4Q+vB+xOIqy0xp6:pm01yBsVJwOwpFFbukvq0fcc81vB+xO6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ha_verypdf2word-v3crk_cz.exe
Files
-
22f3f962b3d41524dd2bbce341b1569a_JaffaCakes118.rar
-
ha_verypdf2word-v3crk_cz.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 280KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
-
verypdf_pdf2word.jpg.jpg
-
verypdf_pdf2word.md5
-
汉化说明.txt