Static task
static1
Behavioral task
behavioral1
Sample
HA_Video2iPod3.26_LRH.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
HA_Video2iPod3.26_LRH.exe
Resource
win10v2004-20240802-en
General
-
Target
c7e6b361f406f1cf1018796c82fb9cea_JaffaCakes118
-
Size
4.0MB
-
MD5
c7e6b361f406f1cf1018796c82fb9cea
-
SHA1
8c37592174b4b053981936fcb3cf6b4ea47a488a
-
SHA256
332741826b676b0224d837cf2b03bc7061712787346e529ecc629a5a8255dd21
-
SHA512
41a6157d9f2f8f10aa51b4eb33de7e9bdb665a55977bd5a2d9544fb123f42e765ff80b2741f20bb4fdc843e99e63f8b4c858ba9e1d5290d8c63797dc35a762af
-
SSDEEP
98304:3eBzwdRp9BFIivHPXRvVjA7bXy5xl4xciKJT1DIWLLnZ8PB1ja:3EUJzJHPBvVjA7eLiCiKbvpy1ja
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_Video2iPod3.26_LRH.exe
Files
-
c7e6b361f406f1cf1018796c82fb9cea_JaffaCakes118.rar
-
HA_Video2iPod3.26_LRH.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
heat.ray Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
heat.ray Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Soft2CN Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Video2iPod_3.26.JPG.jpg
-
下载说明.htm.html .js polyglot
-
汉化说明.txt