Static task
static1
Behavioral task
behavioral1
Sample
HA_AhnReport505_CZ.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
HA_AhnReport505_CZ.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
非常世纪资源网.url
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
非常世纪资源网.url
Resource
win10v2004-20240704-en
General
-
Target
69b618d8e632670478071b546e7bef1c_JaffaCakes118
-
Size
1.0MB
-
MD5
69b618d8e632670478071b546e7bef1c
-
SHA1
fefe54bbaf6cba1969f8e718843fa44bc4a42551
-
SHA256
5e4c65385b5afdd8b129816ce53e3c67bc80c4f94ae87d9b1bb93a089eddafe4
-
SHA512
cd385768fe550156c495d54c98b3c0c147b6a4f3e2ae12f00c4ec4575e73bba073b688d9e44b9c17b24977c19ea80875c0c8ded27979104e7f3d5dccdab70699
-
SSDEEP
24576:zqekePMIiOwUIur1NQPgm5quuYaI1cLuJVDXPOZUBPCKzv:z3aur1Ntcquu4u6VDX2ZURB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_AhnReport505_CZ.EXE
Files
-
69b618d8e632670478071b546e7bef1c_JaffaCakes118.rar
-
HA_AhnReport505_CZ.EXE.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 276KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
-
下载说明.htm.html .js polyglot
-
安装说明.txt
-
非常世纪资源网.url.url