Static task
static1
Behavioral task
behavioral1
Sample
MyDiskTest.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
MyDiskTest.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240709-en
General
-
Target
7673d30b0ec0a3b9f8a7b258d9760919_JaffaCakes118
-
Size
64KB
-
MD5
7673d30b0ec0a3b9f8a7b258d9760919
-
SHA1
eb3b49200f098eae0d66cf27fec476d1ff684561
-
SHA256
3092eccb618cb41c628784b67dc16615233edaa2cc827af82cf147cdb1ca3e67
-
SHA512
62c7d5bfc81e201dfeb0214f2e943e0fec35bd56c8da49d356139b41f05e2143e7826e469bf7611b40ff3e0337989b726a2eea7a261b15e738f6c0331e83b1a0
-
SSDEEP
1536:Rw+u1eJu5XOcPmPhv4UJtsrqwEuLs6FUP2qhi1:S+Gestt294UM+wpLDFUuN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MyDiskTest.exe
Files
-
7673d30b0ec0a3b9f8a7b258d9760919_JaffaCakes118.rar
-
MyDiskTest.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�0 Size: - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
新云软件.url.url