Static task
static1
Behavioral task
behavioral1
Sample
zkzdy500.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
zkzdy500.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
准考证制作示例表(全部).xls
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
准考证制作示例表(全部).xls
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
模板/新云软件.url
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
模板/新云软件.url
Resource
win10v2004-20240611-en
General
-
Target
248c90f69bbccc8ba430346556599322_JaffaCakes118
-
Size
5.6MB
-
MD5
248c90f69bbccc8ba430346556599322
-
SHA1
3f8f4115583e1d4264edf25244209c66992591aa
-
SHA256
41fc87311e7e022fe7c2d1a823fe91c3b2e1742cbb3aff69a58cc88045aebb60
-
SHA512
f850504cfd040970fc153d15bdab1c24ea4323643291024f0855dda1712aa89d4f8f00559486051c3f488d6c3db7f7031cfac14245685cc431d3e336c3bd61ad
-
SSDEEP
98304:uWwDj8HapJjbXUKUjn/3K9atw2jbNLo95gdBBKluW62omaxi7I3vdtF+n0uz196j:u9j8HapJjbEKUjny9aBbNLo9CdBhW+xB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/zkzdy500.exe
Files
-
248c90f69bbccc8ba430346556599322_JaffaCakes118.rar
-
zkzdy500.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 450KB - Virtual size: 449KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
准考证制作示例表(全部).xls.xls windows office2003
-
模板/A4横向每页1X2个有存根有安排表.mbk
-
模板/A4横向每页1X3个有存根有安排表.mbk
-
模板/A4横向每页2X3个.mbk
-
模板/A4横向每页3X3个.mbk
-
模板/A4纵向每页1X2个.mbk
-
模板/A4纵向每页1X4个有存根无安排表.mbk
-
模板/A4纵向每页1X4个有存根有安排表.mbk
-
模板/A4纵向每页1X4个有安排表.mbk
-
模板/A4纵向每页2X3个(普通照片).mbk
-
模板/A4纵向每页2X3个.mbk
-
模板/A4纵向每页2X4个.mbk
-
模板/A4纵向每页3X5个.mbk
-
模板/动画教程制作.mbk
-
模板/新云软件.url.url
-
模板/竞赛准考证.mbk
-
示例照片/12601.jpg.jpg
-
示例照片/12602.jpg.jpg
-
示例照片/12603.jpg.jpg
-
示例照片/12604.jpg.jpg
-
示例照片/12605.jpg.jpg
-
示例照片/12606.jpg.jpg
-
示例照片/12607.jpg.jpg
-
示例照片/12608.jpg.jpg
-
示例照片/12609.jpg.jpg
-
示例照片/12610.jpg.jpg
-
示例照片/12611.jpg.jpg
-
示例照片/12612.jpg.jpg
-
示例照片/12613.jpg.jpg
-
示例照片/12614.jpg.jpg
-
示例照片/12615.jpg.gif
-
示例照片/3.bmp
-
请先阅读说明.txt