Behavioral task
behavioral1
Sample
WORDģɾ/WORDģɾ1.2/PC6.url
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
WORDģɾ/WORDģɾ1.2/PC6.url
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
WORDģɾ/WORDģɾ1.2/WORDģɾ1.2.exe
Resource
win7-20240903-en
General
-
Target
25c99b2455ecd657308026295fec58d6_JaffaCakes118
-
Size
364KB
-
MD5
25c99b2455ecd657308026295fec58d6
-
SHA1
90e9386697468fe1750a44c5f41187a298017e3b
-
SHA256
a6758f0a28b1df31b424c681a435c5938041e6090ccaa72549b9b42ca53fe29e
-
SHA512
154c4a92d9feff42f2f20b20841647a02ae384031894108a55ec1b8dcb4527efee761c0e9f60aef70c0135bc02b54528bf18bc058844bfd57b46c6c64c5316e1
-
SSDEEP
6144:GePA2DvC8rSZn+aBk1Q9+WBpjmzcvYE4go5lwfuh55lCyukc6TYXn7ph55xxp8I5:GQTLkwcv54gQw2bd3QXn7ph5zx1
Malware Config
Signatures
-
resource yara_rule static1/unpack001/WORDģɾ/WORDģɾ1.2/WORDģɾ1.2.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/WORDģɾ/WORDģɾ1.2/WORDģɾ1.2.exe
Files
-
25c99b2455ecd657308026295fec58d6_JaffaCakes118.zip
-
WORDģɾ/WORDģɾ1.2/PC6.url
-
WORDģɾ/WORDģɾ1.2/WORDģɾ1.2.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 524KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 358KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
WORDģɾ/WORDģɾ1.2/˵.txt