Static task
static1
Behavioral task
behavioral1
Sample
HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/属性修改器2款/8项属性修改器.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/属性修改器2款/8项属性修改器.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/属性修改器2款/9项属性修改器.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/属性修改器2款/9项属性修改器.exe
Resource
win10v2004-20240426-en
General
-
Target
81271e23f3b3e58b9732aba7c50732ef_JaffaCakes118
-
Size
118KB
-
MD5
81271e23f3b3e58b9732aba7c50732ef
-
SHA1
383ccc562f6a1de154550317b157fbaf0988ee7c
-
SHA256
bb465226aa0bba2b63c372c9765b541ab623cd4b5a1676d17cef5646ba89a835
-
SHA512
e2be4d4632bb2e66a0d2c772b820885040c4f97041b12483524b9ee658c71d6d238f13184394a003ed774b9f317e7acb202cfc892136b0f714c9a4e651138975
-
SSDEEP
3072:6qg53vIrVlLyD6TNRKtOjNRFFNrS6FzKt4nqa0+0cc+DzUA:6qglMz2AXdFS6FO47XDDDzz
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/属性修改器2款/8项属性修改器.exe unpack001/HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/属性修改器2款/9项属性修改器.exe
Files
-
81271e23f3b3e58b9732aba7c50732ef_JaffaCakes118.rar
-
HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/readme.txt
-
HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/内置作弊器1款/episodic/cfg/config.cfg
-
HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/属性修改器2款/8项属性修改器.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 56KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/属性修改器2款/9项属性修改器.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 56KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/通关显示档2款/使用说明.txt
-
HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/通关显示档2款/显示档1/episodic/cfg/autoexec.cfg
-
HalfLife2_edit_06_06_14/HalfLife2_edit_06_06_14/通关显示档2款/显示档2/episodic/cfg/config.cfg