Overview
overview
6Static
static
33DMGAME �...��.url
windows7-x64
13DMGAME �...��.url
windows10-2004-x64
13DMGAME �...��.url
windows7-x64
13DMGAME �...��.url
windows10-2004-x64
1hdtunepro/...10.exe
windows7-x64
6hdtunepro/...10.exe
windows10-2004-x64
6hdtunepro/..._7.exe
windows7-x64
6hdtunepro/..._7.exe
windows10-2004-x64
6Static task
static1
Behavioral task
behavioral1
Sample
3DMGAME 中国第一单机游戏门户 全球最大汉化游戏论坛.url
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3DMGAME 中国第一单机游戏门户 全球最大汉化游戏论坛.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
3DMGAME 最新单机游戏补丁下载大全-3DM下载站.url
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
3DMGAME 最新单机游戏补丁下载大全-3DM下载站.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
hdtunepro/HDTunePro_Win8_10.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
hdtunepro/HDTunePro_Win8_10.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
hdtunepro/HDTunePro_WinXP_7.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
hdtunepro/HDTunePro_WinXP_7.exe
Resource
win10v2004-20240508-en
General
-
Target
3b6391d4ea32a1d6819383ba32570dce_JaffaCakes118
-
Size
1.7MB
-
MD5
3b6391d4ea32a1d6819383ba32570dce
-
SHA1
11d9d4edb0df8b50cca0d62a9234b0f498166547
-
SHA256
78a921c1f8a2e8a80b5a1c245ac02cfccb29af6a002752ecda33a8bbf9929bc0
-
SHA512
e44d044cdb5ec2aad5ff67aa9d50e91da4eb1ddd2ff8693fb6455c6560c20026bf5d89334a06eda1895c24278d3864398780b6c0b78be632634dc60033c30eaf
-
SSDEEP
49152:NdMGagaJBlvkQl9t2izG7ZiXofbHgARd5DuceAt84KbCt:UP5n2jtiXCbAAvVunS9KbCt
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/hdtunepro/HDTunePro_Win8_10.exe unpack001/hdtunepro/HDTunePro_WinXP_7.exe
Files
-
3b6391d4ea32a1d6819383ba32570dce_JaffaCakes118.rar
-
3DMGAME 中国第一单机游戏门户 全球最大汉化游戏论坛.url
-
3DMGAME 最新单机游戏补丁下载大全-3DM下载站.url.url
-
3DMGAM使用说明.txt
-
hdtunepro/HDTunePro_Win8_10.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 268KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 35KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.���� Size: 849KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
hdtunepro/HDTunePro_WinXP_7.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 268KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 35KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.���� Size: 852KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE