Overview
overview
3Static
static
3VStatCngr/VStat.exe
windows7-x64
1VStatCngr/VStat.exe
windows10-2004-x64
1VStatCngr/...��.htm
windows7-x64
1VStatCngr/...��.htm
windows10-2004-x64
1VStatCngr/...��.url
windows7-x64
1VStatCngr/...��.url
windows10-2004-x64
1VStatCngr/...��.url
windows7-x64
1VStatCngr/...��.url
windows10-2004-x64
1VStatCngr/...��.url
windows7-x64
1VStatCngr/...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
VStatCngr/VStat.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
VStatCngr/VStat.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
VStatCngr/必看说明.htm
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
VStatCngr/必看说明.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
VStatCngr/河源下载站.url
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
VStatCngr/河源下载站.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
VStatCngr/用firefox浏览器上网更安全.url
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
VStatCngr/用firefox浏览器上网更安全.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
VStatCngr/金山毒霸2007 无限升级版.url
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
VStatCngr/金山毒霸2007 无限升级版.url
Resource
win10v2004-20240426-en
General
-
Target
514f72a38efe1b5783879bbb67bd0a48_JaffaCakes118
-
Size
22KB
-
MD5
514f72a38efe1b5783879bbb67bd0a48
-
SHA1
490381ee39d68e075e8220371c4a4e274c5df53d
-
SHA256
8440c372c00e0a1dbcb6d9e0873e6025169e7ff8f4bbc7bcff6a3a1427886d61
-
SHA512
5abb04c10bd24efb66f450380208ca0ebd135d2e35e40046c87b710a7e6ff195a002c42eab82269bf67082f0edd8bbe83aa9a0737700df5887729c1c6186779c
-
SSDEEP
384:PKiXRCHzQCckYjZGQ1BoYQ+SdyGQMq54v12GStk9KiZatL2sZf9M+8wT+cSKx7eD:PJXQTQiYtGQ7KTQMqaIk9KTNLtXvT+cu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/VStatCngr/VStat.exe
Files
-
514f72a38efe1b5783879bbb67bd0a48_JaffaCakes118.rar
-
VStatCngr/VStat.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 112KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
-
VStatCngr/必看说明.htm
-
VStatCngr/河源下载站.url.url
-
VStatCngr/河源下载站Cngr.cn说明.txt
-
VStatCngr/用firefox浏览器上网更安全.URL.url
-
VStatCngr/金山毒霸2007 无限升级版.url.url