Static task
static1
Behavioral task
behavioral1
Sample
单机游戏下载.url
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
单机游戏下载.url
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
图标提取.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
图标提取.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
河源下载站-cngr.cn.url
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
河源下载站-cngr.cn.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
淘宝热卖.url
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
淘宝热卖.url
Resource
win10v2004-20240426-en
General
-
Target
8abe30a57f1566bd82b1a071bed121c5_JaffaCakes118
-
Size
1.2MB
-
MD5
8abe30a57f1566bd82b1a071bed121c5
-
SHA1
480dd120c7c624d6edff4927cad11b63d400577a
-
SHA256
76f7632f4eb10a49689c7b22622dd77c6a740ef44b16bdc5e922474d1ac35e85
-
SHA512
39c4fc40901971034b0ebe98220348c76c83fcf08662a70f16f7f85074d3c1e92dc47a154b04ed3404e3f54714d026c77e5440a50509f67b172d6a18a319203d
-
SSDEEP
24576:HZIRy8wrvkjr2KO29HHBoVO7Yt4LZsHs7vgOBT:HZIRyLor6QHYO7lLZ8qvTBT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/图标提取.exe
Files
-
8abe30a57f1566bd82b1a071bed121c5_JaffaCakes118.rar
-
单机游戏下载.url.url
-
图标提取.exe.exe windows:5 windows x86 arch:x86
df73b1a98f4fea604751315605a5c3a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamStop
ws2_32
WSAAsyncSelect
kernel32
EnumResourceNamesA
user32
IsIconic
gdi32
GetTextMetricsA
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
DragQueryFileA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
wldap32
ord29
comdlg32
GetOpenFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 444KB - Virtual size: 996KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
河源下载站-cngr.cn.url.url
-
淘宝热卖.url.url