Overview
overview
8Static
static
8sample.tar
windows7-x64
1sample.tar
windows10-2004-x64
1001e271055...89.pdf
windows7-x64
3001e271055...89.pdf
windows10-2004-x64
4004e74d54d...a0.pdf
windows7-x64
3004e74d54d...a0.pdf
windows10-2004-x64
30106fb569e...f19.js
windows7-x64
30106fb569e...f19.js
windows10-2004-x64
302bfe34bea...33.pdf
windows7-x64
302bfe34bea...33.pdf
windows10-2004-x64
4030423da29...aeb.js
windows7-x64
3030423da29...aeb.js
windows10-2004-x64
303042cc378...3e.pdf
windows7-x64
303042cc378...3e.pdf
windows10-2004-x64
304095314d5...c1.pdf
windows7-x64
304095314d5...c1.pdf
windows10-2004-x64
3049675afd5...89.pdf
windows7-x64
3049675afd5...89.pdf
windows10-2004-x64
30733c4e212...40.pdf
windows7-x64
30733c4e212...40.pdf
windows10-2004-x64
408da26158b...ff.pdf
windows7-x64
308da26158b...ff.pdf
windows10-2004-x64
30d711f2049...e5.pdf
windows7-x64
70d711f2049...e5.pdf
windows10-2004-x64
30e0c3a177b...077.js
windows7-x64
30e0c3a177b...077.js
windows10-2004-x64
30f24780097...37.pdf
windows7-x64
30f24780097...37.pdf
windows10-2004-x64
30f5d42aa99...7b.pdf
windows7-x64
30f5d42aa99...7b.pdf
windows10-2004-x64
30fc9c4e1e2...9e.pdf
windows7-x64
30fc9c4e1e2...9e.pdf
windows10-2004-x64
3Behavioral task
behavioral1
Sample
sample.tar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
sample.tar
Resource
win10v2004-20250314-en
Behavioral task
behavioral3
Sample
001e2710555613a82e94156d3ed9c289.pdf
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
001e2710555613a82e94156d3ed9c289.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral5
Sample
004e74d54dcf79c641d5cf8a615488a0.pdf
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
004e74d54dcf79c641d5cf8a615488a0.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral7
Sample
0106fb569e87e02fc88d496064abdf19.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
0106fb569e87e02fc88d496064abdf19.js
Resource
win10v2004-20250313-en
Behavioral task
behavioral9
Sample
02bfe34bea55e327cfdead9cff215f33.pdf
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
02bfe34bea55e327cfdead9cff215f33.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral11
Sample
030423da29e1e6f4a527518126de4aeb.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
030423da29e1e6f4a527518126de4aeb.js
Resource
win10v2004-20250314-en
Behavioral task
behavioral13
Sample
03042cc3786dafdb941019488d4cad3e.pdf
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
03042cc3786dafdb941019488d4cad3e.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral15
Sample
04095314d51057a13e21908de1266fc1.pdf
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
04095314d51057a13e21908de1266fc1.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral17
Sample
049675afd5c9505b9715872d499b9389.pdf
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
049675afd5c9505b9715872d499b9389.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral19
Sample
0733c4e2122cdfcfdd4699a3cbdc8b40.pdf
Resource
win7-20241023-en
Behavioral task
behavioral20
Sample
0733c4e2122cdfcfdd4699a3cbdc8b40.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral21
Sample
08da26158b76ca38e0ddb740aaf9b4ff.pdf
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
08da26158b76ca38e0ddb740aaf9b4ff.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral23
Sample
0d711f2049a6004cffe447dab78cd7e5.pdf
Resource
win7-20250207-en
Behavioral task
behavioral24
Sample
0d711f2049a6004cffe447dab78cd7e5.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral25
Sample
0e0c3a177b898c523e8303940ae99077.js
Resource
win7-20250207-en
Behavioral task
behavioral26
Sample
0e0c3a177b898c523e8303940ae99077.js
Resource
win10v2004-20250314-en
Behavioral task
behavioral27
Sample
0f24780097467c4c54f8f306346dff37.pdf
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
0f24780097467c4c54f8f306346dff37.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral29
Sample
0f5d42aa99b17eabddc19a46013b517b.pdf
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
0f5d42aa99b17eabddc19a46013b517b.pdf
Resource
win10v2004-20250313-en
Behavioral task
behavioral31
Sample
0fc9c4e1e2148912188dd913ff95149e.pdf
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
0fc9c4e1e2148912188dd913ff95149e.pdf
Resource
win10v2004-20250314-en
Errors
General
-
Target
JaffaCakes118_73e63c02a2be9b305e770a1cfb5166b8
-
Size
20.0MB
-
MD5
73e63c02a2be9b305e770a1cfb5166b8
-
SHA1
8c8184a83ba0dea1074f768d50d864c7bfd4797e
-
SHA256
065f3e527b8e8046efc92f372c60c9e9cc0feb5970e8a45a45e81f9828030d81
-
SHA512
07aaa9178b7ecc39d63970cb7139289d586806fc99b642802f71b4a84dd5a25086a0ec0411e9bc56697725a5633d63f23bdbdc248eabc91ddcd67439153fc0d9
-
SSDEEP
393216:Aq/+DzwwWgIz8dYfigOfoQ6Z70gjagAxH0xfiFzSlZ+ftB3obXtjkX:F/s9WfQYLOfV6V0wNunklwTYbXdkX
Malware Config
Signatures
-
resource static1/unpack002/4031049fe402e8ba587583c08a25221a -
PDF contains JavaScript
Detects presence of JavaScript in PDF files.
-
PDF contains one or more embedded files
Detects presence of embedded files in PDF files.
-
Malformed data in PDF
A PDF can contain malformed data to evade detection
-
HTTP links in PDF interactive object 2 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/sample pdf_with_link_action static1/unpack002/7b80f7ed7052405cdf6434ff5bc7c175 pdf_with_link_action
Files
-
JaffaCakes118_73e63c02a2be9b305e770a1cfb5166b8.bz2
-
sample.tar .pdf polyglot
-
001e2710555613a82e94156d3ed9c289.pdf
-
pad.swf
-
004e74d54dcf79c641d5cf8a615488a0.pdf
-
0106fb569e87e02fc88d496064abdf19.js .pdf polyglot
-
02bfe34bea55e327cfdead9cff215f33.pdf
-
1.swf
-
030423da29e1e6f4a527518126de4aeb.js .pdf polyglot
-
03042cc3786dafdb941019488d4cad3e.pdf
-
03546e59967af0c2dbf609013934cd07
-
04095314d51057a13e21908de1266fc1.pdf
-
049675afd5c9505b9715872d499b9389.pdf
-
0700bffe83561c1e2a5156d89de68f6d
-
0733c4e2122cdfcfdd4699a3cbdc8b40.pdf
-
08da26158b76ca38e0ddb740aaf9b4ff.pdf
-
0ab4a29af51b17335abbe0eb861784aa
-
0d711f2049a6004cffe447dab78cd7e5.pdf
-
0e0c3a177b898c523e8303940ae99077.js .pdf polyglot
-
0e1fc785eff45ff0b140dbf61abf3eab
-
0f24780097467c4c54f8f306346dff37.pdf
-
0f5d42aa99b17eabddc19a46013b517b.pdf
-
0fc9c4e1e2148912188dd913ff95149e.pdf
-
100cf902ac31766f7d8a521eeb6f8d68.pdf
-
10c35deb541e58b115ea2c682edb26ea.pdf
-
10e15dd9b11528762c182b04f80e0a03.pdf
-
116c4ad3656000b7c0908c13470d0001.pdf
-
116d92f036f68d325068f3c7bbf1d535.pdf
-
11dbb8d7924595e24c61eca8c9248834.pdf
-
122ca0d4629ff12c3b0aa21bd18dbf08.pdf
-
15a22ac5b7ed9fd640d6220dac0b4488
-
1618d09ff580014b251794222bb0f0f9.pdf
-
17b67bd445c655598875e4c9a97ba906.pdf
-
194030ef77514d3cad3b23d9fa3a0160.pdf
-
1b2ff9edab6d5663842d6027b2819a86.pdf
-
1dd08cf849277f10cc588718c137e77b.pdf
-
1fd0cd90cbd69234d07b4172bbad754d.pdf
-
21f05c819712e39a7a4d089b4f31e602.pdf
-
21fa925e48a4238e22fef1147f293727.rtf
-
22f3e7e6f64217628f97d09cdaa1810d.pdf
-
230748c2bd16ba0213b73f0fd045169d.pdf
-
231fc7f1300d2e6f94bccfaddbd98ea2.pdf
-
238ecf8c0aee8bfd216cf3cad5d82448.pdf
-
268a0065b6ea134054dc6aea300a830d.pdf
-
26cb2016442b19af37d691ec46424aea.pdf
-
27cd1443a07772e6e04207dd45537eae.pdf
-
289d8bba31bb2e4455f3d28b74926c1d.pdf
-
28f5ed6f32f3d9b800cf41c663b6c7f4.chm
-
29db2fba7975a16dbc4f3c9606432ab2.pdf
-
2aaa2f62cadf2b0f72587b3dffaee669.pdf
-
2bbf014a1752d92b91e3452f9a235464.pdf
-
2cd0e2c020f617ec1edc4ebd489da7e7.pdf
-
2eea004842a335607b612ff10418f6c6.rtf
-
2f846adf7a93e94a0a809eb32f188146.pdf
-
307c2068b22b968a6bd0996e7c77f1ee.pdf
-
33c1b7620ac827b26496534122e0cda6.pdf
-
34d8b44ccdb7c1a6885c7d11c1d87be3.js .pdf polyglot
-
350924123cbf1b126f4e38335ed6660d.pdf
-
357d296be75e7e3988591d9123a01177.js .pdf polyglot
-
36af296c3954274f4222847814b1f63b.pdf
-
398fca0465861879284ef20f8e12e063.pdf
-
3a67789dc523b6d083e8c4d652c7316a.pdf
-
3abe00a1d0dc816a99587f574d02b498.pdf
-
3bb77dde61188077ae6b23822f135df8.js .pdf polyglot
-
3f57c3d98225d04e631c09d61adbb973.xls windows office2003
-
4031049fe402e8ba587583c08a25221a.xls windows office2003
Sheet1
Sheet2
Sheet3
-
4378bb2be0e41569bcce202f86e505f6.pdf
-
43c2aad81665ddf0e585f50771a20582.pdf
-
43cb55861b7fcf1dfb6968c9ef110bcc.pdf
-
4407f42fa696c32ca473bead96e36aca.pdf
-
44a23a54587581144b492579d67d742d.pdf
-
49cfa73a76f04572d7c31f885045fa38.pdf
-
4ae0c11a28edbdf132cf0eb8e823de74.pdf
-
4afbc36385ed847a1a6f6a5618fb47c1.js .pdf polyglot
-
4b2947d31e15ac41ea3bfd9f46f168d5.pdf
-
4bb64c1da2f73da11f331a96d55d63e2.xls windows office2003
Sheet1
Sheet2
Sheet3
-
4f754a8ac2db2577a4ac0324985cd997.pdf
-
4fcb63eee95e7bd64662c9330f3d62d4.pdf
-
50b9bee0213917e52d32d82907234aeb.pdf
-
511625f5fa0315b5a870029ae3338464.pdf
-
51241d683dc9f24152bdd894658d72db.pdf
-
51d3e2bd306495de50bfd0f2f4e19ae9
-
535abf5702d8f3de247b5103e31150f5.pdf
-
536c0afe4d655a66dccad4af9679caa9.pdf
-
538582c697d3bb59d408da61279ac75b.pdf
-
53c39496579bcbda962d93734552397b.pdf
-
53d54ffe118642102fe626649f9ffdba.rtf
-
541e9691816fecdeb59204d92e846240.pdf
-
54267a90492108fb4d0894553556c155.rtf
-
554e71bfc718915135125752cf66dec2.pdf
-
569607bf8315d9143fe3f7d424c3fda9.pdf
-
56ae500c28dd85ac4d711b16e4f2125c.pdf
-
575c2db4c26b05b862ebb60c5950f14c.pdf
-
5766ba4473462485e15c4efdb243cb68.pdf
-
576b214a1e5b6649f6677e20315a7ea9.pdf
-
5800f546b535bd2b4e505b5c9be753ff.doc windows office2003
-
58d2c062fe278cd0e97964e7e6a0a3bb.pdf
-
58de08c1155a775b760049dff3f5abe4.pdf
-
595a9a9074e0845636a5b4c7bb1b157a.pdf
-
5a0aac44ddaad1e512a0d505c217baff.rtf
-
5b7541f3648cc440405179cb5c194644.pdf
-
5bbdbec981b0708ea29edff2f8d78bcf
-
5c31ef69086467c073dde69cf3298555.pdf
-
5cd2b97590afb82016aa56677cf0f42e.pdf
-
61baabd6fc12e01ff73ceacc07c84f9a.pdf
-
6227e1594775773a182e1b631db5f6bb.pdf
-
63523effac8c0bf379ca6d69bb3227ad.pdf
-
64f258918c1122b89468bb0ffbaff02d.js .pdf polyglot
-
6634eacd3dae03be9767ac91b71decba.doc windows office2003
-
66753cadcb8bd537af50f2ae92d7627b.pdf
-
6764488f739f9198381c056850bb6d9c.pdf
-
67b19a04bdbd0adc3b39130a26331493.pdf
-
67b4eaf0c10c4de37e094a6e7d09c8dc.pdf
-
683b003e9ecfd3834a318fad65d39e34.pdf
-
68fe3b0adfce215b95e55824913ff67d.pdf
-
6932d141916cd95e3acaa3952c7596e4.pdf
-
69e7de7b23acaff1e9417deedfae8b42.pdf
-
6b568dd640cb15a8994697adf9e7a399.rtf
-
6e14c7a424c2eef7f37810ff65650837.pdf
-
6f70e1815fe09fad9346a45b95eeb3e6
-
71803d893ed7d052fdb58f10da200fe9
-
719cf2bab291da52e495b86929b7ea7d.pdf
-
721601bdbec57cb103a9717eeef0bfca.pdf
-
722efe25f0d973fbb684cc32da1f693e
-
72d6d864205b0f1b32bbc9a7e5184ee7.pdf
-
738af108a6edd46536492b1782589a04.pdf
-
73fadb8f36e4f34a6d4719dc4ccbe666
-
745a347637b0603a76abbcb1e8277d1c.pdf
-
757ead51fce397101a675d9bcca9d08f.pdf
-
75d92097d4ae109aa5d199aa97e08569.pdf
-
76f7e8dc68b364abfd893f0e9340fae8.pdf
-
790b4a2c03086bd1917433a5084d2068
-
7b80f7ed7052405cdf6434ff5bc7c175.pdf
-
7b9e1c1b479447506cc046a5d8219eca.xls windows office2003
-
7d6e9af1018c10f1b7dfa5169a35d941.pdf
-
7f73dd439572409a64bc4dd0d603aacf.pdf
-
7f7413bd2a4a0f001efd0305f4f56acf.js .pdf polyglot
-
80202a9c51d8544bac7ac273428dd97c
-
80f20af63314be2e8c79d8ca99eeb713.pdf
-
82a5f96d1834411a3b5af9c21ffb14a8.pdf
-
82a7c8fdacca91b1bd0fdc2407674f50.pdf
-
82eeda4a754bf163d406e3e205df97e9.pdf
-
83220f00d3b3cde40bd3bf58c78ba899.pdf
-
853027bec65b3f2434788a70d4d15d89.pdf
-
872537348b6f1ef77d74f1d298978d72.pdf
-
896c14bc7ff88923e35aa824ab6c72da