Overview
overview
10Static
static
3Soft440,51...UT.exe
windows7-x64
Soft440,51...UT.exe
windows10-2004-x64
Soft440,51...er.exe
windows7-x64
Soft440,51...er.exe
windows10-2004-x64
Soft440,51...er.exe
windows7-x64
Soft440,51...er.exe
windows10-2004-x64
Soft440,51...er.exe
windows7-x64
Soft440,51...er.exe
windows10-2004-x64
Soft440,51...er.exe
windows7-x64
Soft440,51...er.exe
windows10-2004-x64
Soft440,51...er.exe
windows7-x64
Soft440,51...er.exe
windows10-2004-x64
Soft440,51...ry.exe
windows7-x64
Soft440,51...ry.exe
windows10-2004-x64
Soft440,51...is.exe
windows7-x64
Soft440,51...is.exe
windows10-2004-x64
Soft440_51...LL.dll
windows7-x64
1Soft440_51...LL.dll
windows10-2004-x64
1Soft440,51...en.exe
windows7-x64
10Soft440,51...en.exe
windows10-2004-x64
10Soft440,51...te.exe
windows7-x64
Soft440,51...te.exe
windows10-2004-x64
Soft440,51...FO.exe
windows7-x64
Soft440,51...FO.exe
windows10-2004-x64
Soft440,51...08.exe
windows7-x64
Soft440,51...08.exe
windows10-2004-x64
Soft440,51...we.exe
windows7-x64
10Soft440,51...we.exe
windows10-2004-x64
10Static task
static1
Behavioral task
behavioral1
Sample
Soft440,510/ToHidden/BREAKOUT.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Soft440,510/ToHidden/BREAKOUT.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Soft440,510/ToHidden/CPITAudioPlayer.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Soft440,510/ToHidden/CPITAudioPlayer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Soft440,510/ToHidden/CPITGuider.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Soft440,510/ToHidden/CPITGuider.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Soft440,510/ToHidden/CPITVideoPlayer.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Soft440,510/ToHidden/CPITVideoPlayer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Soft440,510/ToHidden/CpitPicViewer.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Soft440,510/ToHidden/CpitPicViewer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Soft440,510/ToHidden/CpitTxtViewer.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Soft440,510/ToHidden/CpitTxtViewer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Soft440,510/ToHidden/Memory.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Soft440,510/ToHidden/Memory.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Soft440,510/ToHidden/NTris.exe
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Soft440,510/ToHidden/NTris.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Soft440_510/ToHidden/ResourceDLL.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Soft440_510/ToHidden/ResourceDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Soft440,510/ToHidden/ToHidden.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Soft440,510/ToHidden/ToHidden.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Soft440,510/ToHidden/calculate.exe
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Soft440,510/ToHidden/calculate.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Soft440,510/serwisowe/DEVINFO.exe
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Soft440,510/serwisowe/DEVINFO.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Soft440,510/serwisowe/GUID2008.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Soft440,510/serwisowe/GUID2008.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Soft440,510/serwisowe/serwisowe.exe
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Soft440,510/serwisowe/serwisowe.exe
Resource
win10v2004-20240802-en
General
-
Target
cf738b6e9003c95f59958a925259c41a_JaffaCakes118
-
Size
8.5MB
-
MD5
cf738b6e9003c95f59958a925259c41a
-
SHA1
bbac2ad9be74f88bbe3ed302fc5d3e48a3d239b9
-
SHA256
380b6198ffee155959fe811c0982ec4193c54198c3926777364c8d357b418c13
-
SHA512
7bb4caf8f08928d264173d86562e168936529ca15b728db37a64c056aecfb233761888f0cd76a973eaaddd2a9159953e1f74c6a068e73be1ae86097bef9a93fe
-
SSDEEP
196608:8dDfQTL+nAcfU00OTAMxOTg4GsmqXiEYyRlvFhZueUFj:8dD0L+nnLfug4CKvFH6Fj
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Soft440,510/ToHidden/ToHidden.exe unpack001/Soft440,510/serwisowe/serwisowe.exe
Files
-
cf738b6e9003c95f59958a925259c41a_JaffaCakes118.rar
-
Soft440,510/DRIVERS.bin
-
Soft440,510/NK.bin
-
Soft440,510/TINYNK.bin
-
Soft440,510/ToHidden/BREAKOUT.EXE
-
Soft440,510/ToHidden/CPITAudioPlayer.exe
-
Soft440,510/ToHidden/CPITGuider.exe
-
Soft440,510/ToHidden/CPITVideoPlayer.exe
-
Soft440,510/ToHidden/CpitPicViewer.exe
-
Soft440,510/ToHidden/CpitTxtViewer.exe
-
Soft440,510/ToHidden/Memory.exe
-
Soft440,510/ToHidden/NTris.exe
-
Soft440,510/ToHidden/ResourceDLL.dll
-
Soft440,510/ToHidden/ToHidden.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
DBX Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 41KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Soft440,510/ToHidden/calculate.exe
-
Soft440,510/chain.bin
-
Soft440,510/chain.lst
-
Soft440,510/serwisowe/DEVINFO.EXE
-
Soft440,510/serwisowe/GUID2008.exe
-
Soft440,510/serwisowe/serwisowe.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
DBX Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 41KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE