Static task
static1
Behavioral task
behavioral1
Sample
HA_PlatoDVD2iPod6.71_LRH.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
HA_PlatoDVD2iPod6.71_LRH.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240802-en
General
-
Target
d2ffe84e7a531f085f00fc7686bec7a7_JaffaCakes118
-
Size
4.6MB
-
MD5
d2ffe84e7a531f085f00fc7686bec7a7
-
SHA1
b22541ffe3b55baf1e4655f1b30db683dda0e027
-
SHA256
41ff8c09b711f973b4ccfec00f080d168ac9667c3129cd805cd0d25243d787c6
-
SHA512
1cd178caf19dcf9cedffee3c4d4f5c5bd9819d022e75ee3fed3d63a9b48045da88779852c1061283888d76a66af2bf06d0bb4fb4223bf7f4e3c320c0ceaed73f
-
SSDEEP
98304:wOCa9p3Q/QY60J52nx1c3QjieqBDmZQb7TtUENh7E1Z3XsV:wVE3W/enxu3sJqoZG3tfE/nc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_PlatoDVD2iPod6.71_LRH.exe
Files
-
d2ffe84e7a531f085f00fc7686bec7a7_JaffaCakes118.rar
-
HA_PlatoDVD2iPod6.71_LRH.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
S2C0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
S2C1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.~s2c Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
新云软件.url.url