Static task
static1
Behavioral task
behavioral1
Sample
155ɫվ.url
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
155ɫվ.url
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
pno0001.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
pno0001.exe
Resource
win10v2004-20240709-en
General
-
Target
398e89e2d4ee657fb5df162147501db0_JaffaCakes118
-
Size
98KB
-
MD5
398e89e2d4ee657fb5df162147501db0
-
SHA1
28c41ff0599842f6986487cd90d564446ac26810
-
SHA256
3b4aa264116b448967db3322b45d5fcee139882dde914a16660614ee04d5423f
-
SHA512
7b120e075c29b72a1b798fe65a3043b8e282a1e499ded6790f7cbcb3f2c8a4ad9ffed0dcc46cb951c6313ef56ba55aeb9666a0d3d570d4df4e113342fae35660
-
SSDEEP
3072:kew4eVoG6+Jjes44dytCFlmK/7MCZOAxR4sQ:pwb6+Jjp7dFfzoAy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/pno0001.exe
Files
-
398e89e2d4ee657fb5df162147501db0_JaffaCakes118.zip
-
155ɫվ.url.url
-
pno0001.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 94KB - Virtual size: 13.0MB
-
readme.txt