Static task
static1
Behavioral task
behavioral1
Sample
Readme-说明.htm
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Readme-说明.htm
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
ha_zdsoft-movie-screensaver-1070_cz.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
ha_zdsoft-movie-screensaver-1070_cz.exe
Resource
win10v2004-20240426-en
General
-
Target
408187c05bfe884c1e098312c2c9d140_JaffaCakes118
-
Size
1.3MB
-
MD5
408187c05bfe884c1e098312c2c9d140
-
SHA1
e81cac3cbd4e1c84a12222c2094949ee46458d93
-
SHA256
1a02c2d2fa4219f6f262582359eef77be39ee6c9781309df1c4af948035fada0
-
SHA512
1562fdd15ad955d3ae4df56abf06cc709eac501f197d2ee6b17180336c802955489a4e436ecaf627597bb4db72d4f4a5ac53db17d20910cc78f3b471519c236e
-
SSDEEP
24576:t4Xo4uyd2NH6o4UQcl/9gGhdrrpmx0OmxjKBO+brFAjRQzGe7912Vc/mC:mh7dLUQcl/9PnpmT2uvfWjuGeqm/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ha_zdsoft-movie-screensaver-1070_cz.exe
Files
-
408187c05bfe884c1e098312c2c9d140_JaffaCakes118.rar
-
Readme-说明.htm.html
-
ha_zdsoft-movie-screensaver-1070_cz.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 284KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
-
zds_movie_screensaver.jpg.jpg
-
zdsoft-movie-screensaver.md5
-
汉化说明.txt