Static task
static1
Behavioral task
behavioral1
Sample
Grand Chase Hack Patcher.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Grand Chase Hack Patcher.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
config.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
config.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
d4ref.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
d4ref.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
x5shell.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
x5shell.dll
Resource
win10v2004-20240709-en
General
-
Target
757e83a417620a27675ee7d1a758a885_JaffaCakes118
-
Size
5.4MB
-
MD5
757e83a417620a27675ee7d1a758a885
-
SHA1
cd7f7d0535612abac4889171516ada519ebbef84
-
SHA256
857e9a25a877b60107b35f540b10fc864d7ce90ccfe76bbb9ddf40fa608de929
-
SHA512
130609059ac3c554ba8c8094db3785fdfa4b983396b57507914b2b25950161a7dc309aff940c4522d988062fde842667afbbe517b7213481b8dc2948d1ce0c75
-
SSDEEP
98304:O3OUrNZJHgHzT8hIlwXZF/z6Eq78UcoTwTyeazTE9Um4yvC:iOURZJHoEXrzuf0W8+m48C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Grand Chase Hack Patcher.exe
Files
-
757e83a417620a27675ee7d1a758a885_JaffaCakes118.rar
-
Grand Chase Hack Patcher.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 67KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
README(S).txt
-
config.dll
-
config.soul
-
d4ref.dll
-
x5shell.dll