Behavioral task
behavioral1
Sample
LOLϸV14.2Ӿࡿ.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
LOLϸV14.2Ӿࡿ.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
最新版免费下载-百度搜【闪电软件园】.url
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
最新版免费下载-百度搜【闪电软件园】.url
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
软件官网--闪电软件园.url
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
软件官网--闪电软件园.url
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
闪电下载吧.url
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
闪电下载吧.url
Resource
win10v2004-20240508-en
General
-
Target
7e91395bdf799a038b16a7038d87ce3a_JaffaCakes118
-
Size
4.9MB
-
MD5
7e91395bdf799a038b16a7038d87ce3a
-
SHA1
b48aaa6e52f92c53bb3484654c58ad3bd1feb520
-
SHA256
70c775da7a6261f6ac8122fca8cb00114ef20f2c1d158c57090064e9ec67f921
-
SHA512
f6449aa54cd145873ec93e541d14baef6e7bd1e95fa84fd2780143b39d93fae212c6d99b71f49ab58afe9221e83791b5020a5185d0677b6cd989e0cc8748a6c4
-
SSDEEP
98304:eFJdfG1UjAf7JKCPD3TDJUe+Qwkw01F/FMfLsVQUdhrQrBHYZPG48w:eFDwUW7JKIDDDJUWF9N2YrQrFWP+w
Malware Config
Signatures
Files
-
7e91395bdf799a038b16a7038d87ce3a_JaffaCakes118.zip
-
LOLϸV14.2Ӿࡿ.exe.exe windows:4 windows x86 arch:x86
0e2cd35171d7cbdec3f33e4da908ea2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasGetConnectStatusA
kernel32
MultiByteToWideChar
user32
GetWindow
gdi32
PtVisible
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
VariantChangeType
comctl32
ImageList_GetIcon
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 4.1MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 992KB - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ʹ˵ؿ.txt
-
使用说明.txt
-
最新版免费下载-百度搜【闪电软件园】.url
-
软件官网--闪电软件园.url.url
-
闪电下载吧.url
-
עϸš3ֵ.jpg.jpg
-
http://weixin.qq.com/r/DXRMVNDEwI2-rZQ39yEf
-