Overview
overview
3Static
static
3wmqqddqxs/...��.htm
windows7-x64
wmqqddqxs/...��.htm
windows10-2004-x64
wmqqddqxs/...��.url
windows7-x64
wmqqddqxs/...��.url
windows10-2004-x64
wmqqddqxs/...��.htm
windows7-x64
wmqqddqxs/...��.htm
windows10-2004-x64
wmqqddqxs/...qq.vbs
windows7-x64
wmqqddqxs/...qq.vbs
windows10-2004-x64
wmqqddqxs/...��.url
windows7-x64
wmqqddqxs/...��.url
windows10-2004-x64
wmqqddqxs/...��.exe
windows7-x64
wmqqddqxs/...��.exe
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
wmqqddqxs/77169.org����˵��.htm
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
wmqqddqxs/77169.org����˵��.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
wmqqddqxs/���ĺڿ�ͬ��.url
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
wmqqddqxs/���ĺڿ�ͬ��.url
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/77169.org����˵��.htm
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/77169.org����˵��.htm
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/qq.vbs
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/qq.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/���ĺڿ�ͬ��.url
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/���ĺڿ�ͬ��.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/����QQ����ȫ��ϢQB������0905��.exe
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/����QQ����ȫ��ϢQB������0905��.exe
Resource
win10v2004-20240611-en
General
-
Target
b861ee193df704dd8e7a3498a053d943_JaffaCakes118
-
Size
310KB
-
MD5
b861ee193df704dd8e7a3498a053d943
-
SHA1
e08cd0fd6a2a805cb69cfb47f891383e61c67d11
-
SHA256
79856dbc82080e489fb70c5edc495c49f84ffc0ec66b3a73a9e380ef7e598374
-
SHA512
6473c725df1b586609384abc78cd5389ae6cd415e965f1ac66f5557a3717abeef63cd5623ae0da36feac4ddefecd70cdded0c718c89f3daa17657610d5b502c8
-
SSDEEP
6144:IvovtJ3dqsioAMMB65QdU77nX7/9NRyD1Pl5a0s8fdpL7+yr+KWW:dth3AMMM5QdiLXr9SD3JH7+B/W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/wmqqddqxs/����QQ����ȫ��ϢQB������0905��/����QQ����ȫ��ϢQB������0905��.exe
Files
-
b861ee193df704dd8e7a3498a053d943_JaffaCakes118.zip
-
wmqqddqxs/##��ע��##.txt
-
wmqqddqxs/77169.org����˵��.htm.html
-
wmqqddqxs/77169.orgʹ�ð���˵��.txt
-
wmqqddqxs/���ĺڿ�ͬ��.url
-
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/##��ע��##.txt
-
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/77169.org����˵��.htm.html
-
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/77169.orgʹ�ð���˵��.txt
-
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/qq.asp.vbs
-
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/���ĺڿ�ͬ��.url
-
wmqqddqxs/����QQ����ȫ��ϢQB������0905��/����QQ����ȫ��ϢQB������0905��.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 431KB - Virtual size: 430KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ