Static task
static1
Behavioral task
behavioral1
Sample
HA_DiskSpeed32_CZ.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
HA_DiskSpeed32_CZ.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
U.lnk
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
U.lnk
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
.lnk
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
.lnk
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
ƷUר.url
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
ƷUר.url
Resource
win10v2004-20241007-en
General
-
Target
3c72a035c924daf67d26deef40c696fe_JaffaCakes118
-
Size
1.5MB
-
MD5
3c72a035c924daf67d26deef40c696fe
-
SHA1
6d14925d614197ff3a5b1e7ae84ba669b8565574
-
SHA256
8ff82b093bf87a2d404ab713d6feb9b3c533f9b9b74183cb0ebb84ff4588670c
-
SHA512
93ee633d595c79b9f7aba74be85cb029d9621a1786890b7fd3f3408126f3f8052bf6fe2a6f652604878b5ae9449072c9dfe1dfce0ca70eb2c3a7f78bef2d7358
-
SSDEEP
49152:1lIacnKkk82JOvaq1GjJnfpzgCaiu+eZf:My82JOpwJnqV9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_DiskSpeed32_CZ.EXE
Files
-
3c72a035c924daf67d26deef40c696fe_JaffaCakes118.zip
-
DiskSpeed32.jpg.jpg
-
HA_DiskSpeed32_CZ.EXE.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 284KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
-
U.lnk.lnk
-
boilsoftrmconverter.md5
-
.lnk.lnk
-
ƷUר.url