K:\fetion\登录器分销工程\LoginDlg\Release\LoginDlg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
QQ����24.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
QQ����24.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
QQ����~2.exe
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
QQ����~2.exe
Resource
win10v2004-20240508-en
General
-
Target
2aa96d86cc4fc9877f15bfaa0d4cc797_JaffaCakes118
-
Size
1.1MB
-
MD5
2aa96d86cc4fc9877f15bfaa0d4cc797
-
SHA1
d39f55feb2a2ed2f75a6332c5340f79adc8b101e
-
SHA256
18737a9bdd6aa0314b13ee0b6ef4a9b6538f1a7778f905acf65a62607ec612da
-
SHA512
c5bcefea599a02812773f39cda1ead6d5a64d2f6781bf478b1ae3a8112667e9409f63d2b19e7d3b85efbff99042c86b969a55dc158e8c3cf47c9c8fb876e3ebb
-
SSDEEP
24576:iTu3IcHev/0wmuEbGf9upy+EuJ8vLTVKBSoz/pxtrm:im5FyEkuFEY8vSSi/pvrm
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/QQ����24.exe unpack001/QQ����~2.EXE
Files
-
2aa96d86cc4fc9877f15bfaa0d4cc797_JaffaCakes118.cab
-
QQ����24.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
QQ����~2.EXE.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 269KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 875KB - Virtual size: 875KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ