Behavioral task
behavioral1
Sample
使用说明.url
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
使用说明.url
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
卡里4399风色轨迹主线助手v1.1.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
卡里4399风色轨迹主线助手v1.1.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
极速软件下载.url
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
极速软件下载.url
Resource
win10v2004-20240226-en
General
-
Target
8fd527283d44e00eace1cf3d2bb5eaa6_JaffaCakes118
-
Size
2.8MB
-
MD5
8fd527283d44e00eace1cf3d2bb5eaa6
-
SHA1
0123ec1150bbceec9220ce18cfcceed9ae0a3962
-
SHA256
c929ad521d1b36ad5c77d495ce531c54e5ba026e0f8769aba6eab0daaf1b79c6
-
SHA512
92f37019d1d6d2bf33a0c2beead04e0a1d2dddcf1b31e5659f0a6204190667b6169e46a1d3d5a1acffc9acc65beb9e139e1fb0abd09be4c0f9a6182ddd65bf9d
-
SSDEEP
49152:FQbEB8Y4LDFRDPFbJvOBiz/ZYR/mJpB7ey+IVWaC9uA5AhvrLWsYs52aZS+4S8:FoESLFRDtUBiz/+EDB7e1IVWV9uEApri
Malware Config
Signatures
-
resource yara_rule static1/unpack001/卡里4399风色轨迹主线助手v1.1.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/卡里4399风色轨迹主线助手v1.1.exe unpack002/out.upx
Files
-
8fd527283d44e00eace1cf3d2bb5eaa6_JaffaCakes118.rar
-
使用说明.url
-
卡里4399风色轨迹主线助手v1.1.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 896KB - Virtual size: 893KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
极速软件下载.url.url