Overview
overview
3Static
static
3Trial rese...in.vbs
windows7-x64
1Trial rese...in.vbs
windows10-2004-x64
1Trial rese...ry.vbs
windows7-x64
1Trial rese...ry.vbs
windows10-2004-x64
1Trial rese....x.exe
windows7-x64
1Trial rese....x.exe
windows10-2004-x64
1Trial rese...ey.exe
windows7-x64
1Trial rese...ey.exe
windows10-2004-x64
1Trial rese...ft.exe
windows7-x64
1Trial rese...ft.exe
windows10-2004-x64
1Trial rese...et.chm
windows7-x64
1Trial rese...et.chm
windows10-2004-x64
1Trial rese...et.exe
windows7-x64
1Trial rese...et.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Trial reset/Alcohol_Plugin-src/Plugin.vbs
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Trial reset/Alcohol_Plugin-src/Plugin.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Trial reset/Alcohol_Plugin-src/Registry.vbs
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Trial reset/Alcohol_Plugin-src/Registry.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Trial reset/Plugins/Alcohol 1.x.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Trial reset/Plugins/Alcohol 1.x.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
Trial reset/Plugins/Empty Key.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Trial reset/Plugins/Empty Key.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
Trial reset/Plugins/SlySoft.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Trial reset/Plugins/SlySoft.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
Trial reset/Trial-Reset.chm
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Trial reset/Trial-Reset.chm
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
Trial reset/Trial-Reset.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Trial reset/Trial-Reset.exe
Resource
win10v2004-20240709-en
General
-
Target
5aa044942b7550df69e367310c9228b1_JaffaCakes118
-
Size
204KB
-
MD5
5aa044942b7550df69e367310c9228b1
-
SHA1
29ff48c08e266808cb14aef63367676e26eea306
-
SHA256
daee40a58be8b3b9d5e08083465108d8abe59f6048ed7bcefc12981717d0864e
-
SHA512
a787e7b5792ec3823742536ebaccedceabfa6acdd970526d3ef9103f9e02398a172e49d6d897536446970710f74a9756ac9f6b353738b837f1098de4b5351eb9
-
SSDEEP
3072:o0/lrtnw5R5Upj5DyV+oVA2ditvtDyZMQ2lkbd/QXwibf324LuI837MKrPp0gFKQ:xr1wH5U6A2W1yX2lko32tIU7MMdM3g
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/Trial reset/Plugins/Alcohol 1.x.dll unpack001/Trial reset/Plugins/Empty Key.dll unpack001/Trial reset/Plugins/SlySoft.dll unpack001/Trial reset/Trial-Reset.exe
Files
-
5aa044942b7550df69e367310c9228b1_JaffaCakes118.zip
-
Trial reset/Alcohol_Plugin-src/Alcohol.vbp
-
Trial reset/Alcohol_Plugin-src/Alcohol.vbw
-
Trial reset/Alcohol_Plugin-src/Plugin.bas.vbs
-
Trial reset/Alcohol_Plugin-src/Registry.bas.vbs
-
Trial reset/Plugins/Alcohol 1.x.dll.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 48KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
-
Trial reset/Plugins/Empty Key.dll.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 60KB - Virtual size: 4B
���� Size: - Virtual size:
-
Trial reset/Plugins/SlySoft.dll.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 56KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
-
Trial reset/Sample/AkaraExeLock320 .txt
-
Trial reset/Sample/BitsumAll.txt
-
Trial reset/Sample/EasyGIFAnimator32.txt
-
Trial reset/Sample/ExeGuard18.txt
-
Trial reset/Sample/ExeWrapper23.txt
-
Trial reset/Sample/Exif2htl.txt
-
Trial reset/Sample/FairBot14.txt
-
Trial reset/Sample/GoldWave.txt
-
Trial reset/Sample/NoNamePacker.txt
-
Trial reset/Sample/RegDefend13.txt
-
Trial reset/Sample/RegHide.txt
-
Trial reset/Sample/Reggie.txt
-
Trial reset/Sample/WinRAR3x.txt
-
Trial reset/Sample/WinRK2x.txt
-
Trial reset/Sample/ZipZag173.txt
-
Trial reset/Trial-Reset.chm.chm
-
Trial reset/Trial-Reset.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 1.1MB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA