Static task
static1
Behavioral task
behavioral1
Sample
Settings/新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Settings/新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
USBStarter.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
USBStarter.exe
Resource
win10v2004-20240802-en
General
-
Target
bd4570bce9632529836e5a4136ef1dce_JaffaCakes118
-
Size
168KB
-
MD5
bd4570bce9632529836e5a4136ef1dce
-
SHA1
fcce6029649be97da1701476d8169ed9f46b8368
-
SHA256
f7e7df3381b85c444f9e8d6c05d150fffe70136fe084d1acb6fc3ab2ce4fcff2
-
SHA512
c46bd282740795f760bda9999ae3b6b3b593becb5a359b92552819fbe054b8c59daee2c558a32c79d5456d17a823ca85620bdc97bbf30ccc53d2e33aab85666b
-
SSDEEP
3072:3WCT97YaQHYj51ejgmtH8sct0YFXaSkis2GcAgr51R9fICKP5nBvOzC1l0y:G8l2YjTWh7cK6aSkCGt2fIP9BvOEl0y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/USBStarter.exe
Files
-
bd4570bce9632529836e5a4136ef1dce_JaffaCakes118.rar
-
Settings/(导出)中等级别安全设置.set
-
Settings/(导出)最低级别安全设置.set
-
Settings/(导出)较低级别安全设置.set
-
Settings/(导出)较高级别安全设置.set
-
Settings/新云软件.url.url
-
USBStarter.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 552KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
U盘拦截者.TXT