HH_By_Soft2CN
Reserverd
fzh_s2c
refreshDesktop
Overview
overview
3Static
static
3OfficeIns/...ns.chm
windows7-x64
1OfficeIns/...ns.chm
windows10-2004-x64
1OfficeIns/...ns.exe
windows7-x64
1OfficeIns/...ns.exe
windows10-2004-x64
1OfficeIns/...��.exe
windows7-x64
1OfficeIns/...��.exe
windows10-2004-x64
1OfficeIns/...��.url
windows7-x64
1OfficeIns/...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
OfficeIns/OfficeIns.chm
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
OfficeIns/OfficeIns.chm
Resource
win10v2004-20240708-en
Behavioral task
behavioral3
Sample
OfficeIns/OfficeIns.exe
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
OfficeIns/OfficeIns.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
OfficeIns/soft2cn.com汉化说明.exe
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
OfficeIns/soft2cn.com汉化说明.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
OfficeIns/新云软件.url
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
OfficeIns/新云软件.url
Resource
win10v2004-20240704-en
Target
2ff78aca48fabd43d45e5925160b9444_JaffaCakes118
Size
191KB
MD5
2ff78aca48fabd43d45e5925160b9444
SHA1
a4262624696673c082dc03be710197a6ece4f647
SHA256
d9a033137c43db0623ba06d0fe906fc400f8d65abfd9641bd5cba79879336c60
SHA512
ede4517c24af86ee592ccd1d53769e01805e2e87762850942690a0fa63a123719d43efe6265359a909864065aec9fbe66662add28cdf8816ccd675cd6c658d71
SSDEEP
3072:ajovrmkrm861YsQNiaGmdP292i/0cOQyohEF8WE+husiy2qQC7vG09VBB0o0W0:aCakqAsQfly2mFyoh4E+ssiE77xPBBh0
Checks for missing Authenticode signature.
resource |
---|
unpack001/OfficeIns/OfficeIns.exe |
unpack001/OfficeIns/soft2cn.com汉化说明.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
HH_By_Soft2CN
Reserverd
fzh_s2c
refreshDesktop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ