Static task
static1
Behavioral task
behavioral1
Sample
tsdzbaibian/sys/Untitled.htm
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
tsdzbaibian/sys/Untitled.htm
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
tsdzbaibian/百变按钮 3.0.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
tsdzbaibian/百变按钮 3.0.exe
Resource
win10v2004-20240508-en
General
-
Target
288f7a55ebb016efac900e74a99d60f8_JaffaCakes118
-
Size
3.1MB
-
MD5
288f7a55ebb016efac900e74a99d60f8
-
SHA1
271da4dd469958ebdc2e2f91199627ef64f97745
-
SHA256
6cfc2c747bbcbdc53b6b2278c8124b5c2ebdfce2def1b7dab6b5d47e5db29c83
-
SHA512
89ba81923e3cfef2b265f14f92fbd543829df7790efcf529aa6095b064d95a4c4368383da6726d518a5738a72bd7daef189065a430c10285dabd63c3621cb2ea
-
SSDEEP
98304:SrDv/R4tPyj7GeekZYEYOuVfs29hFdM6cZjb:ILRdjaeEWuVfZ9u6cVb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/tsdzbaibian/百变按钮 3.0.exe
Files
-
288f7a55ebb016efac900e74a99d60f8_JaffaCakes118.rar
-
tsdzbaibian/skins/15.an
-
tsdzbaibian/skins/17.an
-
tsdzbaibian/skins/20.an
-
tsdzbaibian/skins/22.an
-
tsdzbaibian/skins/23.an
-
tsdzbaibian/skins/27.an
-
tsdzbaibian/skins/29.an
-
tsdzbaibian/skins/3.an
-
tsdzbaibian/skins/30.an
-
tsdzbaibian/skins/31.an
-
tsdzbaibian/skins/32.an
-
tsdzbaibian/skins/35.an
-
tsdzbaibian/skins/36.an
-
tsdzbaibian/skins/38.an
-
tsdzbaibian/skins/4.an
-
tsdzbaibian/skins/40.an
-
tsdzbaibian/skins/41.an
-
tsdzbaibian/skins/45.an
-
tsdzbaibian/skins/49.an
-
tsdzbaibian/skins/53.an
-
tsdzbaibian/skins/54.an
-
tsdzbaibian/skins/55.an
-
tsdzbaibian/skins/56.an
-
tsdzbaibian/skins/58.an
-
tsdzbaibian/skins/60.an
-
tsdzbaibian/skins/63.an
-
tsdzbaibian/skins/66.an
-
tsdzbaibian/skins/67.an
-
tsdzbaibian/skins/68.an
-
tsdzbaibian/skins/69.an
-
tsdzbaibian/skins/7.an
-
tsdzbaibian/skins/70.an
-
tsdzbaibian/skins/71.an
-
tsdzbaibian/skins/74.an
-
tsdzbaibian/skins/78.an
-
tsdzbaibian/skins/79.an
-
tsdzbaibian/skins/8.an
-
tsdzbaibian/skins/83.an
-
tsdzbaibian/skins/88.an
-
tsdzbaibian/skins/95.an
-
tsdzbaibian/skins/98.an
-
tsdzbaibian/skins/XP风格(橡皮).an
-
tsdzbaibian/skins/XP风格(水晶).an
-
tsdzbaibian/skins/XP风格(灰绿色).an
-
tsdzbaibian/skins/XP风格(点燃加粗).an
-
tsdzbaibian/skins/XP风格(红).an
-
tsdzbaibian/skins/XP风格(绿).an
-
tsdzbaibian/skins/XP风格(蓝).an
-
tsdzbaibian/skins/a一般.an
-
tsdzbaibian/skins/mxp05.an
-
tsdzbaibian/skins/mxp1.an
-
tsdzbaibian/skins/mxp2.an
-
tsdzbaibian/skins/mxp3.an
-
tsdzbaibian/skins/mxskin03.an
-
tsdzbaibian/skins/mxskin14.an
-
tsdzbaibian/skins/mxskin15.an
-
tsdzbaibian/skins/mxskin17.an
-
tsdzbaibian/skins/mxskin18.an
-
tsdzbaibian/skins/mxskin2.an
-
tsdzbaibian/skins/mxskin20.an
-
tsdzbaibian/skins/mxskin24.an
-
tsdzbaibian/skins/mxskin33.an
-
tsdzbaibian/skins/mxskin8.an
-
tsdzbaibian/skins/vista(绿色).an
-
tsdzbaibian/skins/vista(蓝色).an
-
tsdzbaibian/skins/vista(银白).an
-
tsdzbaibian/skins/保留1.an
-
tsdzbaibian/skins/单线(异型).an
-
tsdzbaibian/skins/单线(醒目点燃).an
-
tsdzbaibian/skins/单线(醒目).an
-
tsdzbaibian/skins/另类(1).an
-
tsdzbaibian/skins/另类(good).an
-
tsdzbaibian/skins/另类(双色).an
-
tsdzbaibian/skins/另类(右上标).an
-
tsdzbaibian/skins/另类(橡皮).an
-
tsdzbaibian/skins/另类(灰).an
-
tsdzbaibian/skins/另类(边框).an
-
tsdzbaibian/skins/另类(雕刻).an
-
tsdzbaibian/skins/弧面按钮_灰绿点燃.an
-
tsdzbaibian/skins/弧面按钮(石材绿).an
-
tsdzbaibian/skins/感应按钮(浅灰绿).an
-
tsdzbaibian/skins/感应(红粗边框).an
-
tsdzbaibian/skins/点燃加粗(银灰).an
-
tsdzbaibian/skins/玻璃(梯形).an
-
tsdzbaibian/skins/玻璃(白).an
-
tsdzbaibian/skins/玻璃(醒目点燃).an
-
tsdzbaibian/skins/粗线边框(点燃蓝).an
-
tsdzbaibian/skins/边框点燃加粗.an
-
tsdzbaibian/skins/金属按钮(精工).an
-
tsdzbaibian/skins/金属风格(银灰).an
-
tsdzbaibian/skins/金属(烤蓝).an
-
tsdzbaibian/sys/Untitled.htm.html
-
tsdzbaibian/sys/loev.gif
-
tsdzbaibian/sys/setup.dat
-
tsdzbaibian/百变按钮 3.0.exe.exe windows:4 windows x86 arch:x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ