DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Overview
overview
7Static
static
7accon.dll
windows7-x64
1accon.dll
windows10-2004-x64
1cr-ucopy.exe
windows7-x64
1cr-ucopy.exe
windows10-2004-x64
1default.htm
windows7-x64
1default.htm
windows10-2004-x64
1help.chm
windows7-x64
1help.chm
windows10-2004-x64
1ucopy.exe
windows7-x64
3ucopy.exe
windows10-2004-x64
3官方网站.url
windows7-x64
1官方网站.url
windows10-2004-x64
1Behavioral task
behavioral1
Sample
accon.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
accon.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
cr-ucopy.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
cr-ucopy.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
default.htm
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
default.htm
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
help.chm
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
help.chm
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
ucopy.exe
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
ucopy.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
官方网站.url
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
官方网站.url
Resource
win10v2004-20240709-en
Target
5fecbba17783eed4ec7970ae4697cd7e_JaffaCakes118
Size
813KB
MD5
5fecbba17783eed4ec7970ae4697cd7e
SHA1
9747a93cca459bf0d2d2c81b2167b0872d3a3de4
SHA256
514d90375964098648089322a0c74eec51c5272a5f13809c1b5b7f3331cb7e10
SHA512
53f87320e4795de4c7007b4be6eb4f592ce02858b227c9d00a1f7d6a0275dbb4654a457f89a0f2ea857b75aec1d6fafadcb5c7f76424e52b073979ad3e44295c
SSDEEP
24576:OcmvTnuVsexcsI/gyP2txfkVxATh3EADbNzVGHO:OcMTnuVsemT/02kl9Vt
resource | yara_rule |
---|---|
static1/unpack001/ucopy.exe | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
unpack001/accon.ocx |
unpack001/cr-ucopy.exe |
unpack001/ucopy.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
UnrealizeObject
CreateStreamOnHGlobal
ImageList_SetIconSize
WSACleanup
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE