Behavioral task
behavioral1
Sample
diyoem.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
diyoem.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
guide.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
guide.exe
Resource
win10v2004-20240802-en
General
-
Target
fe9bac37726660aa3b2d9612967814fe_JaffaCakes118
-
Size
394KB
-
MD5
fe9bac37726660aa3b2d9612967814fe
-
SHA1
6d4b5b9cdfeadb6139670872ddacbf5492e7fbd1
-
SHA256
b92f735b4bd10b869d6f1ce659dd0444f1f269b9ba895a59515cfef6d70b73ec
-
SHA512
747105fc9f4a20008177a2059f36295c26a2b4cda0d81e9dad14e0108574f7c1129858dee8e07901c39af8dd884d53142e4105a660b474ed4b588fde2ef55b6e
-
SSDEEP
12288:VqAa99TK8QmYrf7slr73I2qm995PcscK2:4Z9iiY2qmXaq2
Malware Config
Signatures
-
resource yara_rule static1/unpack001/diyoem.exe aspack_v212_v242 static1/unpack001/guide.exe aspack_v212_v242 -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/diyoem.exe unpack001/guide.exe
Files
-
fe9bac37726660aa3b2d9612967814fe_JaffaCakes118.rar
-
diyoem.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 208KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
guide.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
language/English.ini
-
language/下载说明.htm.html .js polyglot
-
language/简体中文.ini
-
language/羉砰いゅ.ini
-
oemdata/Celeron/OEMINFO.INI
-
oemdata/Celeron/oemlogo.bmp
-
oemdata/Celerond/OEMINFO.INI
-
oemdata/Celerond/oemlogo.bmp
-
oemdata/Sempron/OEMINFO.INI
-
oemdata/Sempron/oemlogo.bmp
-
oemdata/Tsunis/OEMINFO.INI
-
oemdata/Tsunis/OEMLOGO.BMP
-
oemdata/acer/OEMINFO.INI
-
oemdata/acer/OEMLOGO.BMP
-
oemdata/ascend/OEMINFO.INI
-
oemdata/ascend/oemlogo.bmp
-
oemdata/asus/OEMINFO.INI
-
oemdata/asus/OEMLOGO.BMP
-
oemdata/athlon64/OEMINFO.INI
-
oemdata/athlon64/oemlogo.bmp
-
oemdata/athlon64fx/OEMINFO.INI
-
oemdata/athlon64fx/oemlogo.bmp
-
oemdata/athlonxp/OEMINFO.INI
-
oemdata/athlonxp/oemlogo.bmp
-
oemdata/bayi/OEMINFO.INI
-
oemdata/bayi/oemlogo.bmp
-
oemdata/benq/OEMINFO.INI
-
oemdata/benq/oemlogo.bmp
-
oemdata/blank.bmp
-
oemdata/bluestar/OEMINFO.INI
-
oemdata/bluestar/oemlogo.bmp
-
oemdata/boe/oeminfo.ini
-
oemdata/boe/oemlogo.bmp
-
oemdata/centrino/OEMINFO.INI
-
oemdata/centrino/oemlogo.bmp
-
oemdata/compaq/OEMINFO.INI
-
oemdata/compaq/OEMLOGO.BMP
-
oemdata/dell/OEMINFO.INI
-
oemdata/dell/OEMLOGO.BMP
-
oemdata/duron/OEMINFO.INI
-
oemdata/duron/oemlogo.bmp
-
oemdata/eway/OEMINFO.INI
-
oemdata/eway/oemlogo.bmp
-
oemdata/founder/OEMINFO.INI
-
oemdata/founder/OEMLOGO.BMP
-
oemdata/fuji/OEMINFO.INI
-
oemdata/fuji/OEMLOGO.BMP
-
oemdata/gw/OEMINFO.INI
-
oemdata/gw/oemlogo.bmp
-
oemdata/haier/OEMINFO.INI
-
oemdata/haier/oemlogo.bmp
-
oemdata/hasee/OEMINFO.INI
-
oemdata/hasee/oemlogo.bmp
-
oemdata/hedy/OEMINFO.INI
-
oemdata/hedy/OEMLOGO.BMP
-
oemdata/hisense/OEMINFO.INI
-
oemdata/hisense/oemlogo.bmp
-
oemdata/hp/OEMINFO.INI
-
oemdata/hp/OEMLOGO.BMP
-
oemdata/ibm/OEMINFO.INI
-
oemdata/ibm/OEMLOGO.BMP
-
oemdata/itanium/OEMINFO.INI
-
oemdata/itanium/oemlogo.bmp
-
oemdata/legend/OEMINFO.INI
-
oemdata/legend/OEMLOGO.bmp
-
oemdata/lenovo/oeminfo.ini
-
oemdata/lenovo/oemlogo.bmp
-
oemdata/lg/OEMINFO.INI
-
oemdata/lg/oemlogo.bmp
-
oemdata/nec/OEMINFO.INI
-
oemdata/nec/oemlogo.bmp
-
oemdata/opteron/OEMINFO.INI
-
oemdata/opteron/oemlogo.bmp
-
oemdata/others/oemdiy.bmp
-
oemdata/p3/OEMINFO.INI
-
oemdata/p3/oemlogo.bmp
-
oemdata/p4/OEMINFO.INI
-
oemdata/p4/oemlogo.bmp
-
oemdata/p4ht/OEMINFO.INI
-
oemdata/p4ht/oemlogo.bmp
-
oemdata/pd/OEMINFO.INI
-
oemdata/pd/oemlogo.bmp
-
oemdata/pe/OEMINFO.INI
-
oemdata/pe/oemlogo.bmp
-
oemdata/pm/OEMINFO.INI
-
oemdata/pm/oemlogo.bmp
-
oemdata/samsung/OEMINFO.INI
-
oemdata/samsung/OEMLOGO.BMP
-
oemdata/sony/OEMINFO.INI
-
oemdata/sony/OEMLOGO.BMP
-
oemdata/star/oeminfo.ini
-
oemdata/star/oemlogo.bmp
-
oemdata/tcl/OEMINFO.INI
-
oemdata/tcl/OEMLOGO.BMP
-
oemdata/thtf/OEMINFO.INI
-
oemdata/thtf/OEMLOGO.BMP
-
oemdata/tosh/OEMINFO.INI
-
oemdata/tosh/OEMLOGO.BMP
-
oemdata/turion64/OEMINFO.INI
-
oemdata/turion64/oemlogo.bmp
-
oemdata/xeon/OEMINFO.INI
-
oemdata/xeon/oemlogo.bmp
-
oemdata/xinlan/OEMINFO.INI
-
oemdata/xinlan/oemlogo.bmp
-
oemdata/下载说明.htm.html .js polyglot
-
oemdiy.ini
-
readme.txt
-
tips.txt
-
whatnew.txt
-
下载说明.htm.html .js polyglot