Static task
static1
Behavioral task
behavioral1
Sample
迷你QQ.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
迷你QQ.exe
Resource
win10v2004-20240709-en
General
-
Target
48d7df81f6785b47ae05cd9f9341c0b1_JaffaCakes118
-
Size
67KB
-
MD5
48d7df81f6785b47ae05cd9f9341c0b1
-
SHA1
3996da1ce2e5e4d6930624acfec851260c9b6d97
-
SHA256
b520c280ba9a110a422298072d02231b4d281447e3116e8912e8317e7d6cbc1f
-
SHA512
7e4cd09fbb0a3e9aafc996fdc5fdd28b94f8b47bc09a16540bfa6d7d1a09dc87f40de65b3476840687852509f1810c6198a4d71e0332e819214265097ea19b0c
-
SSDEEP
1536:9xln6ZRKb/zjzohgRAUxrHkBzVNDxsBhWzlxJbvs:9L6ZRAjzo+RLxUNDxsBEzlfQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/迷你QQ.exe
Files
-
48d7df81f6785b47ae05cd9f9341c0b1_JaffaCakes118.rar
-
下载说明.htm.html .js polyglot
-
迷你QQ.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 448KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA