Static task
static1
Behavioral task
behavioral1
Sample
SETUP.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
SETUP.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
SETUP.pkg
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
_ISDEL.exe
Resource
win7-20240708-en
Behavioral task
behavioral5
Sample
_ISDEL.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral6
Sample
_SETUP.dll
Resource
win7-20240708-en
Behavioral task
behavioral7
Sample
_SETUP.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral8
Sample
注册机/屏幕录像专家 V6.0 注册机.exe
Resource
win7-20240704-en
Behavioral task
behavioral9
Sample
注册机/屏幕录像专家 V6.0 注册机.exe
Resource
win10v2004-20240709-en
General
-
Target
4a16110b20f4344651e7b837cb168b4d_JaffaCakes118
-
Size
2.6MB
-
MD5
4a16110b20f4344651e7b837cb168b4d
-
SHA1
fbcd654eac1bc445e31be4e893aff9d175d0021e
-
SHA256
ba262cb340c85cd1e0a89e716399512de821aac29ffc53e3b35e86e4260c5804
-
SHA512
ac816cda09a581f647961279eb7d31e11367311cd056dd48081f38b31085271bc006be107f591371123b1f030eec9a84ca3ff217a74356205a5446ee75a0e893
-
SSDEEP
49152:QmqavVBsEslDHnQFiFSxpjfQvuuR+iuW5oVzXa4gEddOwtlIYJJIc9/lRa/hIfIc:lqsVBjsFHQFi0zWEzWUXXgEd9l9JIc91
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/注册机/屏幕录像专家 V6.0 注册机.exe
Files
-
4a16110b20f4344651e7b837cb168b4d_JaffaCakes118.rar
-
DISK1.ID
-
SETUP.EXE
-
SETUP.INI
-
SETUP.INS
-
SETUP.PKG
-
_INST32I.EX_
-
_ISDEL.EXE
-
_SETUP.1
-
_SETUP.DLL
-
_SETUP.LIB
-
下载说明.htm.html .js polyglot
-
使用必读.txt
-
安装说明.txt
-
最新功能.txt
-
注册机/屏幕录像专家 V6.0 注册机.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
����t Size: - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
简介.txt
-
软件注册.txt