Static task
static1
Behavioral task
behavioral1
Sample
HA_Image2SWF1002_CZ.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
HA_Image2SWF1002_CZ.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
非常世纪资源网.url
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
非常世纪资源网.url
Resource
win10v2004-20240226-en
General
-
Target
eb41e6ec9801cddc1bb4790e27431071_JaffaCakes118
-
Size
4.1MB
-
MD5
eb41e6ec9801cddc1bb4790e27431071
-
SHA1
10987e5206d523aeb7bef3c6508e4606f42ef633
-
SHA256
ed03d8130f38aeb6bef54b77c4983fb0b5f7a5b4f0c3b1c6a52c9488d3cfa24c
-
SHA512
ec5491f086c0e7060987fa7e864a6235deededc8272f219081128a3d22516c475894b32adf073d2d48c5fb380ad8a2421f1d47e6a11a63d3f18738ce713d1cc0
-
SSDEEP
98304:yN7Rzo75x2cD2FHkhU9XlUwUTzV9o73NyZYrhbvUJuW4Kv:yNtzo75x3QV3rUN2NymhbvzWXv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_Image2SWF1002_CZ.EXE
Files
-
eb41e6ec9801cddc1bb4790e27431071_JaffaCakes118.rar
-
HA_Image2SWF1002_CZ.EXE.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 276KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
-
image2swf.jpg.jpg
-
image2swf.md5
-
下载说明.htm.html .js polyglot
-
安装说明.txt
-
汉化说明.txt
-
非常世纪资源网.url.url