Overview
overview
4Static
static
3OneKey快�...et.exe
windows7-x64
1OneKey快�...et.exe
windows10-2004-x64
1OneKey快�...��.exe
windows7-x64
4OneKey快�...��.exe
windows10-2004-x64
4OneKey快�...��.lnk
windows7-x64
3OneKey快�...��.lnk
windows10-2004-x64
3OneKey快�...up.exe
windows7-x64
1OneKey快�...up.exe
windows10-2004-x64
1OneKey快�...sa.exe
windows7-x64
3OneKey快�...sa.exe
windows10-2004-x64
3OneKey快�...��.url
windows7-x64
1OneKey快�...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
OneKey快捷一键V1.1版/OneKeyInternet.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
OneKey快捷一键V1.1版/OneKeyInternet.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
OneKey快捷一键V1.1版/OneKey快捷一键.exe
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
OneKey快捷一键V1.1版/OneKey快捷一键.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
OneKey快捷一键V1.1版/link/欢迎使用/我的电脑.lnk
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
OneKey快捷一键V1.1版/link/欢迎使用/我的电脑.lnk
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
OneKey快捷一键V1.1版/up.exe
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
OneKey快捷一键V1.1版/up.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
OneKey快捷一键V1.1版/zisa.exe
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
OneKey快捷一键V1.1版/zisa.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
OneKey快捷一键V1.1版/新云软件.url
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
OneKey快捷一键V1.1版/新云软件.url
Resource
win10v2004-20240508-en
General
-
Target
0503c1a9a7ef1ae3f528e177be3d26e0_JaffaCakes118
-
Size
2.6MB
-
MD5
0503c1a9a7ef1ae3f528e177be3d26e0
-
SHA1
481a28c34c7b2a7360035cd25864ae1f69e2460b
-
SHA256
e78c11a52cfe7ea63883ecc1ba3e47a2c7f3aaad258d5f9d3816515460f0e5f8
-
SHA512
cdfa7e4665b15b29a98967228299c59966b7b2569aad01e786e9c612d91b63045d85db4621e87d9c0f708ea76bad7cc1d9cad18a4e2ebd8580f27abe32783aa7
-
SSDEEP
49152:ncQ9y+67ktg1kJbKFM3unAI3Fs90nMb/71xeMu6IxazfiLFH2EPkNcM8yU:nny+Aktg1RGQXeKnMD71xe9BHY8L
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/OneKey快捷一键V1.1版/OneKeyInternet.exe unpack001/OneKey快捷一键V1.1版/OneKey快捷一键.exe unpack001/OneKey快捷一键V1.1版/up.exe unpack001/OneKey快捷一键V1.1版/zisa.exe
Files
-
0503c1a9a7ef1ae3f528e177be3d26e0_JaffaCakes118.rar
-
OneKey快捷一键V1.1版/OneKeyInternet.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 201KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
OneKey快捷一键V1.1版/OneKey快捷一键.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 371KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
OneKey快捷一键V1.1版/link/欢迎使用/我的电脑.lnk.lnk
-
OneKey快捷一键V1.1版/skins/Macos01.skn
-
OneKey快捷一键V1.1版/skins/Mxp01.skn
-
OneKey快捷一键V1.1版/skins/Skin08.skn
-
OneKey快捷一键V1.1版/skins/Skin12.skn
-
OneKey快捷一键V1.1版/skins/Skin13.skn
-
OneKey快捷一键V1.1版/skins/Skin20.skn
-
OneKey快捷一键V1.1版/skins/Skin25.skn
-
OneKey快捷一键V1.1版/skins/Skin28.skn
-
OneKey快捷一键V1.1版/skins/Skin29.skn
-
OneKey快捷一键V1.1版/skins/Skin33.skn
-
OneKey快捷一键V1.1版/skins/Skin34.skn
-
OneKey快捷一键V1.1版/skins/Skin36.skn
-
OneKey快捷一键V1.1版/skins/Skin42.skn
-
OneKey快捷一键V1.1版/skins/Skin44.skn
-
OneKey快捷一键V1.1版/skins/Skin46.skn
-
OneKey快捷一键V1.1版/skins/Skin50.skn
-
OneKey快捷一键V1.1版/skins/Skin52.skn
-
OneKey快捷一键V1.1版/skins/Skin54.skn
-
OneKey快捷一键V1.1版/skins/Skin56.skn
-
OneKey快捷一键V1.1版/skins/Skin58.skn
-
OneKey快捷一键V1.1版/skins/Skin59.skn
-
OneKey快捷一键V1.1版/skins/Skin62.skn
-
OneKey快捷一键V1.1版/skins/Skin65.skn
-
OneKey快捷一键V1.1版/skins/Skin66.skn
-
OneKey快捷一键V1.1版/skins/Skin67.skn
-
OneKey快捷一键V1.1版/skins/Skin68.skn
-
OneKey快捷一键V1.1版/skins/Skin69.skn
-
OneKey快捷一键V1.1版/skins/Skin75.skn
-
OneKey快捷一键V1.1版/skins/Skin76.skn
-
OneKey快捷一键V1.1版/skins/Skin77.skn
-
OneKey快捷一键V1.1版/skins/Skin79.skn
-
OneKey快捷一键V1.1版/skins/Skin80.skn
-
OneKey快捷一键V1.1版/skins/Skin81.skn
-
OneKey快捷一键V1.1版/skins/Skin82.skn
-
OneKey快捷一键V1.1版/skins/Skin83.skn
-
OneKey快捷一键V1.1版/skins/Skin84.skn
-
OneKey快捷一键V1.1版/skins/Skin86.skn
-
OneKey快捷一键V1.1版/skins/Skin87.skn
-
OneKey快捷一键V1.1版/skins/Skin88.skn
-
OneKey快捷一键V1.1版/skins/Skin92.skn
-
OneKey快捷一键V1.1版/skins/Skin93.skn
-
OneKey快捷一键V1.1版/skins/Skin95skn
-
OneKey快捷一键V1.1版/skins/Skin97.skn
-
OneKey快捷一键V1.1版/skins/skin.skn
-
OneKey快捷一键V1.1版/skins/skin19.skn
-
OneKey快捷一键V1.1版/skins/skin40.skn
-
OneKey快捷一键V1.1版/sys/OneKeyIcon.ico
-
OneKey快捷一键V1.1版/sys/gg.txt
-
OneKey快捷一键V1.1版/sys/ggok.txt
-
OneKey快捷一键V1.1版/sys/path.txt
-
OneKey快捷一键V1.1版/up.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 192KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
OneKey快捷一键V1.1版/zisa.exe.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
OneKey快捷一键V1.1版/新云软件.url.url