Static task
static1
Behavioral task
behavioral1
Sample
RoundPic_26000_gb_full/RoundPic.chm
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
RoundPic_26000_gb_full/RoundPic.chm
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
RoundPic_26000_gb_full/RoundPic.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
RoundPic_26000_gb_full/RoundPic.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
RoundPic_26000_gb_full/新云软件.url
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
RoundPic_26000_gb_full/新云软件.url
Resource
win10v2004-20240508-en
General
-
Target
0261b545b005f68b910a5478aa9abb99_JaffaCakes118
-
Size
1.4MB
-
MD5
0261b545b005f68b910a5478aa9abb99
-
SHA1
3627e243ad6d3e96ccf16563cd13759194cd6464
-
SHA256
6233e70fa260046c4f904e6f6072038bb8a7d0601706dab5a8360adda82797c8
-
SHA512
c7c57b45785671081e596c30efe6215c0c4d858f2e01bec5d24f12a819a0d8a72502b70dfb5064c5d96826be58d1d38fff4336028b91a8768d113ba6d043690c
-
SSDEEP
24576:5yzlDxoWwx58zsg3YWijoKWisPkIBmNEGSc5k3KAlHEioy6/Stqlhmclv:IZx04zYWijAdkIBmNEG35kaHL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RoundPic_26000_gb_full/RoundPic.exe
Files
-
0261b545b005f68b910a5478aa9abb99_JaffaCakes118.rar
-
RoundPic_26000_gb_full/Mask/Mask_01.png.png
-
RoundPic_26000_gb_full/Mask/Mask_02.png.png
-
RoundPic_26000_gb_full/Mask/Mask_05.png.png
-
RoundPic_26000_gb_full/Mask/Mask_06.png.png
-
RoundPic_26000_gb_full/Mask/Mask_07.png.png
-
RoundPic_26000_gb_full/Mask/Mask_08.png.png
-
RoundPic_26000_gb_full/Mask/Mask_09.png.png
-
RoundPic_26000_gb_full/Mask/Mask_10.png.png
-
RoundPic_26000_gb_full/Mask/Mask_11.png.png
-
RoundPic_26000_gb_full/Mask/Mask_12.png.png
-
RoundPic_26000_gb_full/Mask/Mask_14.png.png
-
RoundPic_26000_gb_full/Mask/Mask_15.png.png
-
RoundPic_26000_gb_full/Mask/Mask_17.png.png
-
RoundPic_26000_gb_full/Mask/Mask_18.png.png
-
RoundPic_26000_gb_full/Mask/Mask_19.png.png
-
RoundPic_26000_gb_full/Mask/Mask_21.png.png
-
RoundPic_26000_gb_full/Mask/Mask_22.png.png
-
RoundPic_26000_gb_full/Mask/Mask_23.png.png
-
RoundPic_26000_gb_full/Mask/Mask_24.png.png
-
RoundPic_26000_gb_full/Mask/Mask_25.png.png
-
RoundPic_26000_gb_full/Mask/杂志_ELLE.png.png
-
RoundPic_26000_gb_full/Mask/杂志_大众摄影.png.png
-
RoundPic_26000_gb_full/Mask/杂志_男人装.png.png
-
RoundPic_26000_gb_full/Mask/杂志_都市丽人.png.png
-
RoundPic_26000_gb_full/Mask/相框.png.png
-
RoundPic_26000_gb_full/Mask/邮票.png.png
-
RoundPic_26000_gb_full/Readme.txt
-
RoundPic_26000_gb_full/RoundPic.chm.chm
-
RoundPic_26000_gb_full/RoundPic.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 313KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
RoundPic_26000_gb_full/新云软件.url.url