Static task
static1
Behavioral task
behavioral1
Sample
迅雷离线下载工具 2012 V6.0 博远增强版/博元迅雷离线下载增强版6.0.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
迅雷离线下载工具 2012 V6.0 博远增强版/博元迅雷离线下载增强版6.0.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
迅雷离线下载工具 2012 V6.0 博远增强版/更多精彩软件下载.html
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
迅雷离线下载工具 2012 V6.0 博远增强版/更多精彩软件下载.html
Resource
win10v2004-20240704-en
General
-
Target
271cb0276a0d8dd80e7ca31cb7c98a1a_JaffaCakes118
-
Size
2.2MB
-
MD5
271cb0276a0d8dd80e7ca31cb7c98a1a
-
SHA1
56d7259de4595aae5fca2f25b712cb3233d2b692
-
SHA256
90979735e055511e51befcb20e59426ae9b5c07a6be7e926c25c6a8b20f522db
-
SHA512
595be3f48564e58cd1e7c04175c8f952efc28f8fad59380d3c6272cc5b0e9c339dd4b73e58386ef1a4625364d099247ca1fe770d6b5a294c8ff3c50c3ca0d4e3
-
SSDEEP
49152:r8zc368NT2JHaxYhIZW25U4qkxhqd630dMvTkRZWKOSInCfdfZPMM:2c3PGHcYh8b0+vTkvoSInCdZPX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/迅雷离线下载工具 2012 V6.0 博远增强版/博元迅雷离线下载增强版6.0.exe
Files
-
271cb0276a0d8dd80e7ca31cb7c98a1a_JaffaCakes118.rar
-
迅雷离线下载工具 2012 V6.0 博远增强版/∞当下使用小说明书∞.txt
-
迅雷离线下载工具 2012 V6.0 博远增强版/博元迅雷离线下载增强版6.0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
迅雷离线下载工具 2012 V6.0 博远增强版/更多精彩软件下载.html.html