Static task
static1
Behavioral task
behavioral1
Sample
Zwei2Outilcn.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Zwei2Outilcn.exe
Resource
win10v2004-20240508-en
General
-
Target
76d4c170f12855bae9d7f7d15f72da4e_JaffaCakes118
-
Size
306KB
-
MD5
76d4c170f12855bae9d7f7d15f72da4e
-
SHA1
eb02a98f54f28f347a16b0be185d36396ee0d939
-
SHA256
c4f8f0e962f3ec91899d509fe0704029f7ad08660582d0451ac05dde3396baf9
-
SHA512
5060230bf9a67274556b32ec8413bcb40d1bf94d7a5fac6dbe6b85c7f8760716c4ebbc27c5c6503f0b99386aac3478209db5a51d16e373e82e259160b6f2016f
-
SSDEEP
6144:YuhLyxDBzT2Xwdqwwk5Wq31H2ZBi33jp8XLUelwZFZkuupPnopBeW:9mxBzT1j5Wq31H04npSuupgpBeW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Zwei2Outilcn.exe
Files
-
76d4c170f12855bae9d7f7d15f72da4e_JaffaCakes118.rar
-
Zwei2Outilcn.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
����F�� Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
xingkong.jpg.jpg
-
下载说明.txt