Static task
static1
Behavioral task
behavioral1
Sample
ha_zdsoft-movie-screensaver-1070_cz.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ha_zdsoft-movie-screensaver-1070_cz.exe
Resource
win10v2004-20240226-en
General
-
Target
ed7827642d3ea173a95145f690c68780_JaffaCakes118
-
Size
1.3MB
-
MD5
ed7827642d3ea173a95145f690c68780
-
SHA1
a8be973ab4bf339bde7f823ef10dafe319ff1398
-
SHA256
bddc2885a96ab388390cc3a098eb186e42f356dc611ebba762ab26ae2220ca15
-
SHA512
40c098dddbc299149e399b61f3fb204f4bf14f415549638021f585eabcfb48beb67795a1c4eedd0fa8254390c5950d354fe61f35b0e346f1f663b7a72f095d15
-
SSDEEP
24576:C4Xo4uyd2NH6o4UQcl/9gGhdrrpmx0OmxjKBO+brFAjRQzGe7912Vc/mU:1h7dLUQcl/9PnpmT2uvfWjuGeqmh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ha_zdsoft-movie-screensaver-1070_cz.exe
Files
-
ed7827642d3ea173a95145f690c68780_JaffaCakes118.rar
-
ha_zdsoft-movie-screensaver-1070_cz.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 284KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
-
zds_movie_screensaver.jpg.jpg
-
zdsoft-movie-screensaver.md5
-
汉化说明.txt