Static task
static1
Behavioral task
behavioral1
Sample
pkgs1691.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
pkgs1691.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240704-en
General
-
Target
2b68075d9523deeb239593ba1361367b_JaffaCakes118
-
Size
4.5MB
-
MD5
2b68075d9523deeb239593ba1361367b
-
SHA1
5e878f72080f8bb6a59e491f676095300bf24035
-
SHA256
ec9f855f552b4e9b490c4601a4710ea242d28bc1174962f87a66089c07f70ed6
-
SHA512
81ad0dc7fd90fa4c3a8a149facda9c8eddafe11903c3c0bcea674d89a96c7166b86c3e229fea5b2af139d9cc1d711f535b870232d3331cd7c624962d26a621fb
-
SSDEEP
98304:Fc7hWGsuIgGsRbvEXo+cuBZ/VJsQDYhN57ZMf2bNsVmTUbwt0L2/:6WGP+sR4XoJA3Mhbqf2bNMszqLg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/pkgs1691.exe
Files
-
2b68075d9523deeb239593ba1361367b_JaffaCakes118.rar
-
pkgs1691.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
新云软件.url.url