Overview
overview
10Static
static
1058b64582e2...99.dll
windows7-x64
358b64582e2...99.dll
windows10-2004-x64
38bb29205d5...0b.dll
windows7-x64
38bb29205d5...0b.dll
windows10-2004-x64
3b262e47d42...bc.dll
windows7-x64
3b262e47d42...bc.dll
windows10-2004-x64
3c9390a1f7f...ca.dll
windows7-x64
3c9390a1f7f...ca.dll
windows10-2004-x64
3ec56a6bf59...12.dll
windows7-x64
3ec56a6bf59...12.dll
windows10-2004-x64
3ece3f43b8d...99.dll
windows7-x64
3ece3f43b8d...99.dll
windows10-2004-x64
3ef01bd51c0...e0.dll
windows7-x64
3ef01bd51c0...e0.dll
windows10-2004-x64
3f5da3e1d8e...20.dll
windows7-x64
3f5da3e1d8e...20.dll
windows10-2004-x64
3f77e988ff3...67.dll
windows7-x64
3f77e988ff3...67.dll
windows10-2004-x64
3fbaf9bcf1f...42.dll
windows7-x64
3fbaf9bcf1f...42.dll
windows10-2004-x64
3Behavioral task
behavioral1
Sample
58b64582e298888676585cb3fe67f3c1f48b74e7ca56ba96b1b63d9baaa0fa99.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
58b64582e298888676585cb3fe67f3c1f48b74e7ca56ba96b1b63d9baaa0fa99.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
8bb29205d5fd1c8dcff683dbcca2c70697f2fcafc799e4060b987868f4838c0b.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
8bb29205d5fd1c8dcff683dbcca2c70697f2fcafc799e4060b987868f4838c0b.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
b262e47d429a9705e173ca20401db353e887c1adec9d16c649503b31b7b2dcbc.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
b262e47d429a9705e173ca20401db353e887c1adec9d16c649503b31b7b2dcbc.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
c9390a1f7fcb2250a77b952b66272ec2272a0e371725ab0d50a435e012d299ca.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
c9390a1f7fcb2250a77b952b66272ec2272a0e371725ab0d50a435e012d299ca.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
ec56a6bf598c179d048d457ccb42f6b39cc4d37d7252b403a0947c942b53fc12.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
ec56a6bf598c179d048d457ccb42f6b39cc4d37d7252b403a0947c942b53fc12.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
ece3f43b8dbc408716c3b9acbdc3a02a4b8f11eab204e3c5f1f5bdcfa5bfe599.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
ece3f43b8dbc408716c3b9acbdc3a02a4b8f11eab204e3c5f1f5bdcfa5bfe599.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
ef01bd51c036d68316dfe8e98adc30fffecd521bd36cfac6dc86b06c0f9188e0.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
ef01bd51c036d68316dfe8e98adc30fffecd521bd36cfac6dc86b06c0f9188e0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
f5da3e1d8ea95ea2d969c460396447a9bdab242c2df1dcbc2e88a98452393620.dll
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
f5da3e1d8ea95ea2d969c460396447a9bdab242c2df1dcbc2e88a98452393620.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
f77e988ff3f0ff5af39bb4d769606ec49acd0e32551be27bfdca84782ab5f667.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
f77e988ff3f0ff5af39bb4d769606ec49acd0e32551be27bfdca84782ab5f667.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
fbaf9bcf1f9fdbbccbcdf2060e791fc8392c8fdbee1381002e0bd45c1744e042.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
fbaf9bcf1f9fdbbccbcdf2060e791fc8392c8fdbee1381002e0bd45c1744e042.dll
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_3722f0a40a5ba0c24338be402733932ef7b7b0c31ce3b5b24a6b63a4ed0ee660
-
Size
19.8MB
-
MD5
d5566f2e3f169a3ab831351b2a170f35
-
SHA1
53ca0dfc51925c953f2985257f9092162845e117
-
SHA256
3722f0a40a5ba0c24338be402733932ef7b7b0c31ce3b5b24a6b63a4ed0ee660
-
SHA512
7c680755ab49e4e35e4fa8bbcafa43f6f22568ec522dbd5eeadd369ff531813883968be6cb202a7aa1738c7ca3e35063817fa73785420d001da93aa025def2b6
-
SSDEEP
393216:mDjmD2jAVOrFFS8uJnadznuL0vToar5aPMIgX9x3McrUCkSPhOB/Eq3UwIj3m7Mw:mDjGVk5sadf3AQx3McXFQ3iyMw
Malware Config
Signatures
-
Growtopia family
-
Unsigned PE 10 IoCs
Checks for missing Authenticode signature.
resource unpack001/58b64582e298888676585cb3fe67f3c1f48b74e7ca56ba96b1b63d9baaa0fa99 unpack001/8bb29205d5fd1c8dcff683dbcca2c70697f2fcafc799e4060b987868f4838c0b unpack001/b262e47d429a9705e173ca20401db353e887c1adec9d16c649503b31b7b2dcbc unpack001/c9390a1f7fcb2250a77b952b66272ec2272a0e371725ab0d50a435e012d299ca unpack001/ec56a6bf598c179d048d457ccb42f6b39cc4d37d7252b403a0947c942b53fc12 unpack001/ece3f43b8dbc408716c3b9acbdc3a02a4b8f11eab204e3c5f1f5bdcfa5bfe599 unpack001/ef01bd51c036d68316dfe8e98adc30fffecd521bd36cfac6dc86b06c0f9188e0 unpack001/f5da3e1d8ea95ea2d969c460396447a9bdab242c2df1dcbc2e88a98452393620 unpack001/f77e988ff3f0ff5af39bb4d769606ec49acd0e32551be27bfdca84782ab5f667 unpack001/fbaf9bcf1f9fdbbccbcdf2060e791fc8392c8fdbee1381002e0bd45c1744e042
Files
-
JaffaCakes118_3722f0a40a5ba0c24338be402733932ef7b7b0c31ce3b5b24a6b63a4ed0ee660.zip
Password: infected
-
58b64582e298888676585cb3fe67f3c1f48b74e7ca56ba96b1b63d9baaa0fa99.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 524KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
8bb29205d5fd1c8dcff683dbcca2c70697f2fcafc799e4060b987868f4838c0b.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
b262e47d429a9705e173ca20401db353e887c1adec9d16c649503b31b7b2dcbc.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 496KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
c9390a1f7fcb2250a77b952b66272ec2272a0e371725ab0d50a435e012d299ca.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ec56a6bf598c179d048d457ccb42f6b39cc4d37d7252b403a0947c942b53fc12.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ece3f43b8dbc408716c3b9acbdc3a02a4b8f11eab204e3c5f1f5bdcfa5bfe599.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ef01bd51c036d68316dfe8e98adc30fffecd521bd36cfac6dc86b06c0f9188e0.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
f5da3e1d8ea95ea2d969c460396447a9bdab242c2df1dcbc2e88a98452393620.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
f77e988ff3f0ff5af39bb4d769606ec49acd0e32551be27bfdca84782ab5f667.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 267KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
fbaf9bcf1f9fdbbccbcdf2060e791fc8392c8fdbee1381002e0bd45c1744e042.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 431KB - Virtual size: 430KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ