Overview
overview
3Static
static
32329487160...sh.exe
windows7-x64
32329487160...sh.exe
windows10-2004-x64
32329487160...cc.bat
windows7-x64
12329487160...cc.bat
windows10-2004-x64
12329487160...xe.exe
windows7-x64
32329487160...xe.exe
windows10-2004-x64
32329487160...mp.bat
windows7-x64
12329487160...mp.bat
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
2329487160/Brrc/Flash.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2329487160/Brrc/Flash.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
2329487160/Brrc/brcc.bat
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
2329487160/Brrc/brcc.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
2329487160/SwfToExe.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
2329487160/SwfToExe.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
2329487160/deltemp.bat
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
2329487160/deltemp.bat
Resource
win10v2004-20240802-en
General
-
Target
859c9c316b17e6266a865581eb772e63_JaffaCakes118
-
Size
339KB
-
MD5
859c9c316b17e6266a865581eb772e63
-
SHA1
da3837a51988e50ad164588a85261f47d5f7da12
-
SHA256
1772b4114735dbbf9b15a232b8f5f85762fd55470eacc7f3f7dbd329275ab3eb
-
SHA512
a09e866603b9b5eac0d7dc848b078a40899e25123e385fe471e3f0dbc4ec7b59ab03bf1b5b33d255d8c7db428af69e9c44d01ad1594323845dd111cf47524366
-
SSDEEP
6144:sbiprjxTZ3qRPaUgbFOzjnxiMPt+oqKGNqP+tYWUmlFD0YW7Txu+89n4dn:sbipdUgbF4dt1qKw93FD0YWXx789n4dn
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/2329487160/Brrc/Flash.exe unpack001/2329487160/SwfToExe.exe
Files
-
859c9c316b17e6266a865581eb772e63_JaffaCakes118.rar
-
2329487160/Brrc/Flash.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
2329487160/Brrc/brcc.bat
-
2329487160/Brrc/head.RES
-
2329487160/Brrc/head.rc
-
2329487160/Flash.dpr
-
2329487160/Flash.res
-
2329487160/Resource/FlashA.ico
-
2329487160/Resource/FlashB.ico
-
2329487160/Resource/Thumbs.db
-
2329487160/SwfToExe.dpr
-
2329487160/SwfToExe.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 366KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 453KB - Virtual size: 453KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
2329487160/SwfToExe.res
-
2329487160/UCovert.dcu
-
2329487160/UCovert.pas
-
2329487160/UFlash.dcu
-
2329487160/UFlash.dfm
-
2329487160/UFlash.pas
-
2329487160/USwfToExe.dcu
-
2329487160/USwfToExe.dfm
-
2329487160/USwfToExe.pas
-
2329487160/deltemp.bat
-
2329487160/head.RES
-
2329487160/下载说明.htm.html .js polyglot