Overview
overview
5Static
static
5�...��.htm
windows7-x64
3�...��.htm
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�....js
windows7-x64
3�....js
windows10-2004-x64
3�...�.html
windows7-x64
3�...�.html
windows10-2004-x64
3Behavioral task
behavioral1
Sample
ﴴ ﴴ긨_2.1.htm
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
ﴴ ﴴ긨_2.1.htm
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20241010-en
Behavioral task
behavioral20
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
ﴴ ﴴ긨_2.1.js
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
ﴴ ﴴ긨_2.1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
ﴴ ﴴ긨_2.1.html
Resource
win7-20241010-en
Behavioral task
behavioral32
Sample
ﴴ ﴴ긨_2.1.html
Resource
win10v2004-20241007-en
General
-
Target
3ea6cc343899aaf9222dd9b1b1cab2e6_JaffaCakes118
-
Size
1.1MB
-
MD5
3ea6cc343899aaf9222dd9b1b1cab2e6
-
SHA1
b97e08258f129eb970d70bcf2ab131ec4e171ab6
-
SHA256
d27c4a4e298a1751459314f16a77281a6673be4ddc6eccdc9a0b55f5c77d2677
-
SHA512
6cc070b9c7fd954a423f53f497cd7799f6b9df14faaf14eae9120ba8594bc359f6d1c437d66f661fdec145d3079363540ef0b0b9693f1ffa05f23f3cc6831023
-
SSDEEP
24576:aC2nGQmiGFx13Nqz5mxf7ShnXdY8cdOibdNRuDUuy0mL6uMXGGl/NlC3UG:aC2GQ6Fx5S6DSlXdYbvZzuRmcJfCEG
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ﴴ(ɫ)V2.1.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ﴴ(ɫ)V2.1.exe
Files
-
3ea6cc343899aaf9222dd9b1b1cab2e6_JaffaCakes118.zip
-
ź˵.txt
-
ﴴ ﴴ긨_2.1°_9.htm.html
-
ﴴ ﴴ긨_2.1°_9_files/0f0007ZhktZX5RWbqPG2vs.jpg.jpg
-
ﴴ ﴴ긨_2.1°_9_files/0f0007f0-J9e4THmI5fYls.gif.gif
-
ﴴ ﴴ긨_2.1°_9_files/0f000Pp2k-Lz9qzt-_kMUf.jpg.jpg
-
ﴴ ﴴ긨_2.1°_9_files/0f000Z3QZ7OOWKamCE_t46.jpg.jpg
-
ﴴ ﴴ긨_2.1°_9_files/0f000ZjjV0i8qb9MirPK3f.jpg.jpg
-
ﴴ ﴴ긨_2.1°_9_files/0f000rxJqZcRThKn-YWmVf.jpg.jpg
-
ﴴ ﴴ긨_2.1°_9_files/201312123131162145254.jpg.jpg
-
ﴴ ﴴ긨_2.1°_9_files/20131231162211.jpg.jpg
-
ﴴ ﴴ긨_2.1°_9_files/201322617579.jpg.jpg
-
ﴴ ﴴ긨_2.1°_9_files/5.gif.gif
-
ﴴ ﴴ긨_2.1°_9_files/9haot.htm.html .js polyglot
-
ﴴ ﴴ긨_2.1°_9_files/9ht-zb.htm.html .js polyglot
-
ﴴ ﴴ긨_2.1°_9_files/bds_s_v2.js.js
-
ﴴ ﴴ긨_2.1°_9_files/bdsstyle.css
-
ﴴ ﴴ긨_2.1°_9_files/c.js.js
-
ﴴ ﴴ긨_2.1°_9_files/c.php.js
-
ﴴ ﴴ긨_2.1°_9_files/cc.js.js
-
ﴴ ﴴ긨_2.1°_9_files/core(1).php.js
-
ﴴ ﴴ긨_2.1°_9_files/core.php.js
-
ﴴ ﴴ긨_2.1°_9_files/count.js.js
-
ﴴ ﴴ긨_2.1°_9_files/cpro.js.js
-
ﴴ ﴴ긨_2.1°_9_files/d.js.js
-
ﴴ ﴴ긨_2.1°_9_files/down.css
-
ﴴ ﴴ긨_2.1°_9_files/downFunc.js.js
-
ﴴ ﴴ긨_2.1°_9_files/e2te_760100.gif.gif
-
ﴴ ﴴ긨_2.1°_9_files/ecom
-
ﴴ ﴴ긨_2.1°_9_files/ecom(1)
-
ﴴ ﴴ긨_2.1°_9_files/ecom(2)
-
ﴴ ﴴ긨_2.1°_9_files/ecom(3)
-
ﴴ ﴴ긨_2.1°_9_files/ecom(4)
-
ﴴ ﴴ긨_2.1°_9_files/ecom(5)
-
ﴴ ﴴ긨_2.1°_9_files/ecom(6)
-
ﴴ ﴴ긨_2.1°_9_files/f.js.js
-
ﴴ ﴴ긨_2.1°_9_files/fixed7o.js.js
-
ﴴ ﴴ긨_2.1°_9_files/foot.js
-
ﴴ ﴴ긨_2.1°_9_files/h.js.js
-
ﴴ ﴴ긨_2.1°_9_files/highslide-with-html.js.html
-
ﴴ ﴴ긨_2.1°_9_files/highslide.css.html
-
ﴴ ﴴ긨_2.1°_9_files/innerhtml.js.js
-
ﴴ ﴴ긨_2.1°_9_files/jquery-min.js.js
-
ﴴ ﴴ긨_2.1°_9_files/m.js.js
-
ﴴ ﴴ긨_2.1°_9_files/main7o.js.js
-
ﴴ ﴴ긨_2.1°_9_files/newcommon.js.js
-
ﴴ ﴴ긨_2.1°_9_files/s.htm
-
ﴴ ﴴ긨_2.1°_9_files/share.js
-
ﴴ ﴴ긨_2.1°_9_files/sj-sofe.js.js
-
ﴴ ﴴ긨_2.1°_9_files/stat.php.js
-
ﴴ ﴴ긨_2.1°_9_files/sync.htm
-
ﴴ ﴴ긨_2.1°_9_files/sync_pos.htm.html .js polyglot
-
ﴴ ﴴ긨_2.1°_9_files/tlAd.js.js
-
ﴴ ﴴ긨_2.1°_9_files/uijs(1).htm.html .js polyglot
-
ﴴ ﴴ긨_2.1°_9_files/uijs(2).htm.html .js polyglot
-
ﴴ ﴴ긨_2.1°_9_files/uijs(3).htm.html .js polyglot
-
ﴴ ﴴ긨_2.1°_9_files/uijs.htm.html .js polyglot
-
ﴴ ﴴ긨_2.1°_9_files/ying.gif.gif
-
ﴴ(ɫ)V2.1.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 752KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE