Static task
static1
Behavioral task
behavioral1
Sample
Crack/ADC.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Crack/ADC.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Crack/Regpatch.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Crack/Regpatch.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Setup.exe
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
Setup.exe
Resource
win10v2004-20240802-en
General
-
Target
8b4a20503aaea3511442c604492abe24_JaffaCakes118
-
Size
3.9MB
-
MD5
8b4a20503aaea3511442c604492abe24
-
SHA1
c6191478e1c72968f8cee93d61c6c53b53d90381
-
SHA256
9a3d1cd3820c0296f76898ba10613fcf132e7bc059d940abfe0199b483badd33
-
SHA512
71b7fcd5215370c5efce2ddfb0f034b622e90a0359f8929bf3ee1ba4fa9381fb3b7db4cd7d2f4eaa8a31e1a9602ece4bf78b45d3561bcdcc5395a15e9c460105
-
SSDEEP
98304:sAG9oqbEIazDsGYbR7q6LZNmF8PYYga58x12Ykb2WUHFhyEl/:sADQE93TYd7q6LCsrgawLkb2WU2EJ
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Crack/ADC.exe unpack001/Crack/Regpatch.exe unpack001/Setup.exe
Files
-
8b4a20503aaea3511442c604492abe24_JaffaCakes118.rar
-
Crack/ADC.exe.exe windows:4 windows x86 arch:x86
05aa6771e4fc73bb4becd0cdedb24df1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
comctl32
DestroyPropertySheetPage
winmm
PlaySoundA
mousehook
clearMyHook
user32
SetMenu
gdi32
CreateCompatibleBitmap
comdlg32
ChooseFontA
winspool.drv
ClosePrinter
advapi32
GetUserNameA
shell32
SHGetSpecialFolderLocation
oledlg
ord8
ole32
CoRevokeClassObject
olepro32
ord253
oleaut32
SysAllocString
wininet
InternetGetLastResponseInfoA
Sections
.text Size: 953KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Crack/Regpatch.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
REG Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PATCHER Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODED: Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PB Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Setup.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
下载说明.htm.html .js polyglot