Static task
static1
Behavioral task
behavioral1
Sample
HA_ePDF2Word2501_CZ.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
HA_ePDF2Word2501_CZ.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
安装说明.url
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
安装说明.url
Resource
win10v2004-20240709-en
General
-
Target
40f93c87de13d6e2092b35b0ac530b20_JaffaCakes118
-
Size
4.5MB
-
MD5
40f93c87de13d6e2092b35b0ac530b20
-
SHA1
181e714651ea0c85bdd7c087dce65dff5729bb5a
-
SHA256
86e9844670794b2dc35b8a88b933b027ed919b058f61c236d497c5a18e628549
-
SHA512
7ae65c1f4c18d98c7641ac14c5f984f3d06eb8582aecc620de13d58e2a7a558bbc5b6065d30e2043f91116e0bafe2a5777ac6dd28c51677632aa1362670e0dba
-
SSDEEP
98304:PAIdE+k7QL7rL1s3IcRTywg1ahxzVlMZG9J6FTLtDq9Fjo:4Iu+rdcRTyZadl2GvuT5D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_ePDF2Word2501_CZ.EXE
Files
-
40f93c87de13d6e2092b35b0ac530b20_JaffaCakes118.rar
-
HA_ePDF2Word2501_CZ.EXE.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 284KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
-
安装说明.url.url