Overview
overview
10Static
static
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
36287467283873,pdf.exe
windows7-x64
106287467283873,pdf.exe
windows10-2004-x64
10Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Malware Sa...danger
windows7-x64
3Malware Sa...danger
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Malware Samples/0e634c282954fed04fc11071c8e6e13f.danger
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Malware Samples/0e634c282954fed04fc11071c8e6e13f.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Malware Samples/12e90e4b70e21ee2e80f2563f43e72ab.danger
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Malware Samples/12e90e4b70e21ee2e80f2563f43e72ab.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Malware Samples/1d8789bb3b825f6119fbf8aaff2a7db2.danger
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
Malware Samples/1d8789bb3b825f6119fbf8aaff2a7db2.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Malware Samples/2fe23715380e143ce8dfcd815d82a66f.danger
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Malware Samples/2fe23715380e143ce8dfcd815d82a66f.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Malware Samples/3449d1d98ec260570959636e381f0daf.danger
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Malware Samples/3449d1d98ec260570959636e381f0daf.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Malware Samples/3608a584e78a18b8281b7da7956c38dc.danger
Resource
win7-20241023-en
Behavioral task
behavioral12
Sample
Malware Samples/3608a584e78a18b8281b7da7956c38dc.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Malware Samples/3756d7ffc712e924f8f5b795a349f9ee.danger
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Malware Samples/3756d7ffc712e924f8f5b795a349f9ee.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Malware Samples/3910f5a17b016e4de8bf330d6348f211.danger
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Malware Samples/3910f5a17b016e4de8bf330d6348f211.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
6287467283873,pdf.exe
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
6287467283873,pdf.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Malware Samples/4ea2ebaf57eae1cd10481a68d0bf7823.danger
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Malware Samples/4ea2ebaf57eae1cd10481a68d0bf7823.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Malware Samples/53cbbf08fc5a6fb17799813e483efedc.danger
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Malware Samples/53cbbf08fc5a6fb17799813e483efedc.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Malware Samples/63e5798be7ba715c481aec7b2399f766.danger
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
Malware Samples/63e5798be7ba715c481aec7b2399f766.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Malware Samples/65f6dc37499e3054f0f328b27ceef4e7.danger
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Malware Samples/65f6dc37499e3054f0f328b27ceef4e7.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Malware Samples/66f36808089fee107c02503745fc19b4.danger
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
Malware Samples/66f36808089fee107c02503745fc19b4.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
Malware Samples/6965e9bd1d11888c3c70895b241b1834.danger
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Malware Samples/6965e9bd1d11888c3c70895b241b1834.danger
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
Malware Samples/6ad036ba93c94d6976e2d93c7a3aec6f.danger
Resource
win7-20241010-en
Behavioral task
behavioral32
Sample
Malware Samples/6ad036ba93c94d6976e2d93c7a3aec6f.danger
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_b492a779314f8e5acadc326421167bd4ac3ed160d9ad85ce5bd02d71434caa00
-
Size
5.0MB
-
MD5
7b680fdd7ef26a6db365f28a74625d72
-
SHA1
c0a256e4f07a22b1db497545680afab7e0f5ebc8
-
SHA256
b492a779314f8e5acadc326421167bd4ac3ed160d9ad85ce5bd02d71434caa00
-
SHA512
6cb1e8d0b96cdff86c4b1bd1a984f78b94ebe036b8a610bec478850d7084a1cfbcf2dba5f47aa56dd4e65afd535fbc3c81780bcdd30bbc51f8ca2d6c0d2ee1de
-
SSDEEP
98304:a4OFGq9x9lwfVJlldCNVq7uYuxcKTF9eblC760WxHunuBuUVoNU4/:a4O8E9AJXT7uPxJeblC760z+K3
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/6287467283873,pdf.exe unpack003/Sample review of EPDM module, 3mm thk x 1mtr x 10mtr ---2467 roll.exe
Files
-
JaffaCakes118_b492a779314f8e5acadc326421167bd4ac3ed160d9ad85ce5bd02d71434caa00.zip
-
Malware Samples/0e634c282954fed04fc11071c8e6e13f.danger.danger .doc windows office2003
-
Malware Samples/12e90e4b70e21ee2e80f2563f43e72ab.danger.danger .doc windows office2003
-
Malware Samples/1d8789bb3b825f6119fbf8aaff2a7db2.danger.danger .doc windows office2003
-
Malware Samples/2fe23715380e143ce8dfcd815d82a66f.danger.danger .doc windows office2003
-
Malware Samples/3449d1d98ec260570959636e381f0daf.danger.danger .doc windows office2003
-
Malware Samples/3608a584e78a18b8281b7da7956c38dc.danger.danger .doc windows office2003
-
Malware Samples/3756d7ffc712e924f8f5b795a349f9ee.danger.danger .doc windows office2003
-
Malware Samples/3910f5a17b016e4de8bf330d6348f211.danger.danger .doc windows office2003
-
Malware Samples/489cb55fb4e9b9e3ad587c4211bc8397.danger.zip
-
6287467283873,pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 389KB - Virtual size: 389KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Malware Samples/4ea2ebaf57eae1cd10481a68d0bf7823.danger.danger .doc windows office2003
-
Malware Samples/53cbbf08fc5a6fb17799813e483efedc.danger.danger .doc windows office2003
-
Malware Samples/63e5798be7ba715c481aec7b2399f766.danger.danger .doc windows office2003
-
Malware Samples/65f6dc37499e3054f0f328b27ceef4e7.danger.danger .doc windows office2003
-
Malware Samples/66f36808089fee107c02503745fc19b4.danger.danger .doc windows office2003
-
Malware Samples/6965e9bd1d11888c3c70895b241b1834.danger.danger .doc windows office2003
-
Malware Samples/6ad036ba93c94d6976e2d93c7a3aec6f.danger.danger .doc windows office2003
-
Malware Samples/6b29b9beae8404f811d5957916ec63e1.danger.danger .doc windows office2003
-
Malware Samples/6d4a898c5e939f8334ccdc10a21e541c.danger.danger .doc windows office2003
-
Malware Samples/7294093e21629369c44c5c74b43249db.danger.danger .doc windows office2003
-
Malware Samples/7e8288cdea2307e57628c66c3736ceb9.danger.danger .doc windows office2003
-
Malware Samples/7fd7b14acff688e84b811d03e1831552.danger.danger .doc windows office2003
-
Malware Samples/924bb676fa78de25fc92d1a4fec3ee42.danger.danger .doc windows office2003
-
Malware Samples/9bca081bb5e32a1e77c6d4153140ef96.danger.cab
-
Sample review of EPDM module, 3mm thk x 1mtr x 10mtr ---2467 roll.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 663KB - Virtual size: 663KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Malware Samples/a6db1eed5030e1c5c0c85978dfda2cc9.danger.danger .doc windows office2003
-
Malware Samples/a7d109f814417e916fa20934809fe259.danger.danger .doc windows office2003
-
Malware Samples/aa5f5e8fb4a4d8ff9121a0daf3666c5f.danger.danger .doc windows office2003
-
Malware Samples/b1378b3f3b1b564857950018cbd86758.danger.danger .doc windows office2003
-
Malware Samples/b51f9a310d8f54732837947d8f94a739.danger.danger .doc windows office2003
-
Malware Samples/bdd3a5aace9ea34f4162807d02a75a46.danger.danger .doc windows office2003
-
Malware Samples/c61033a29acf02717c07e82614fb8c30.danger.danger .doc windows office2003
-
Malware Samples/cb9d9e95ecbc13e65b90eb6791f84189.danger.danger .doc windows office2003
-
Malware Samples/cdfdf4f2a8b3dc2b96fcd09044090ef9.danger.danger .doc windows office2003
-
Malware Samples/d25fb6643eeb3328ddacfbaa03a8695d.danger.danger .doc windows office2003
-
Malware Samples/d3142ea382b2dd7d2d1ee11add8c811d.danger.danger .doc windows office2003
-
Malware Samples/d571e53f0ca5f3772eec6abff2c968d4.danger.danger .doc windows office2003
-
Malware Samples/dd0abb21db396e2ad724ab545a2f0ef3.danger.danger .doc windows office2003
-
Malware Samples/e2f3cf3ba076f994d1641e1968f0afda.danger.danger .doc windows office2003
-
Malware Samples/e96a93464173d3c02593da09d0fbf80f.danger.danger .doc windows office2003
-
Malware Samples/ee7ab6e10690d24ffddef25a5eaf34d3.danger.danger .doc windows office2003
-
Malware Samples/f088479c9cd5c5c94c4ed5486c1fb4b8.danger.danger .doc windows office2003
-
Malware Samples/f90089b9934ce94d284c02b003b949d4.danger.danger .doc windows office2003