Static task
static1
Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
我的快速启动栏.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
我的快速启动栏.exe
Resource
win10v2004-20240709-en
General
-
Target
69a1ce2503012fbcfa19151ce8d7b225_JaffaCakes118
-
Size
45KB
-
MD5
69a1ce2503012fbcfa19151ce8d7b225
-
SHA1
0f244758c040f909cfaf4d58ba34d48a884352f7
-
SHA256
cc7fca239c2b410b76a8ae689a17f0a96c522dd26e89bf11e645a085813c5c08
-
SHA512
d4b585fae0ed8deba1a07dfc692e586f9baec68c89cbfa63101f7db77d328048477db6609bf59b84a3218fc6846ef4f8f317d3502db13f78f80423e6b49fd3de
-
SSDEEP
768:/dTBVgoTgVc37R9Qv7CW0gd+BLGsgBwSTDKD0jYV7N6S6iF1h0dgVfnEjZGm7RSw:/d+c3XQvG1gdE6wWDYV8S6ibh04c37Vj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/我的快速启动栏.exe
Files
-
69a1ce2503012fbcfa19151ce8d7b225_JaffaCakes118.rar
-
155绿色软件站.url.url
-
我的快速启动栏.exe.exe windows:4 windows x86 arch:x86
375c7402f8748b0ff0440c4212cdf8d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
__vbaVarSub
Sections
pec1 Size: 39KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE