InstallHook
UninstallHook
Static task
static1
Behavioral task
behavioral1
Sample
xzfphmcxrj_gr/DataGet.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
xzfphmcxrj_gr/DataGet.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
xzfphmcxrj_gr/MainHook.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
xzfphmcxrj_gr/MainHook.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
xzfphmcxrj_gr/更多软件下载.url
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
xzfphmcxrj_gr/更多软件下载.url
Resource
win10v2004-20240419-en
Target
026d16f7de0f4e61bbb78d2f7d3cef68_JaffaCakes118
Size
837KB
MD5
026d16f7de0f4e61bbb78d2f7d3cef68
SHA1
549b1762a1aa49ebda583039ad2ab9c60180f4bc
SHA256
e98ea8385bdec2325afd22ea0a81707dc36127ca875b1d0c2012bbe1cd0dba56
SHA512
5c635698c5afe9a6f8be94cd1ffb3c35f0f947d4821ba668a1a8286fd2e58ebf613a0d60537fe21f5cf6b33ba0668ff1f9748cafbb3738740f493b0b16b9aa50
SSDEEP
24576:VkWhJ6lbGel3DHVd/qT1meRMpWxhbkbT2ZVzWtm:V1ClGMz1d/cQpGhby2PzWtm
Checks for missing Authenticode signature.
resource |
---|
unpack001/xzfphmcxrj_gr/DataGet.dll |
unpack001/xzfphmcxrj_gr/MainHook.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
InstallHook
UninstallHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE