Static task
static1
Behavioral task
behavioral1
Sample
ha_pcheal_cz.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ha_pcheal_cz.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240704-en
General
-
Target
687bb7469035e3a49ff2633245b85b24_JaffaCakes118
-
Size
1.4MB
-
MD5
687bb7469035e3a49ff2633245b85b24
-
SHA1
2bd600c97a88f88373f8aff661051b7f50f28510
-
SHA256
af4130d6f059f883938c9e580c6da90c71202e2d9e4cce553b9acd9c42370a3d
-
SHA512
f87d3c11fd05d2140b0872065a656c30efb6937a8f23052bb5cfc8758c8785b9d8b4fbd038dcbdc332417195ce01f8091d0e2ff02b57f541d1d1d686e91b4382
-
SSDEEP
24576:k8/4+fwwZ5VxTy1tHCE+OStC2qwsarkNwLfT+N3yQ8JF2D7AkyCP6aw:2bs5VNmHyOqvYNwLfOCQ8mDMCP6aw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ha_pcheal_cz.exe
Files
-
687bb7469035e3a49ff2633245b85b24_JaffaCakes118.rar
-
ha_pcheal_cz.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
S2C0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
S2C1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.~s2c Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
新云软件.url.url