Overview
overview
3Static
static
3systemclea...ck.exe
windows7-x64
3systemclea...ck.exe
windows10-2004-x64
3systemclea...�0.dll
windows7-x64
1systemclea...�0.dll
windows10-2004-x64
1systemclea...�1.dll
windows7-x64
1systemclea...�1.dll
windows10-2004-x64
1systemclea...10.dll
windows7-x64
1systemclea...10.dll
windows10-2004-x64
1systemclea...11.dll
windows7-x64
1systemclea...11.dll
windows10-2004-x64
1systemclea...12.dll
windows7-x64
1systemclea...12.dll
windows10-2004-x64
1systemclea...13.dll
windows7-x64
1systemclea...13.dll
windows10-2004-x64
1systemclea...14.dll
windows7-x64
1systemclea...14.dll
windows10-2004-x64
1systemclea...15.dll
windows7-x64
1systemclea...15.dll
windows10-2004-x64
1systemclea...16.dll
windows7-x64
1systemclea...16.dll
windows10-2004-x64
1systemclea...17.dll
windows7-x64
1systemclea...17.dll
windows10-2004-x64
1systemclea...18.dll
windows7-x64
1systemclea...18.dll
windows10-2004-x64
1systemclea...19.dll
windows7-x64
1systemclea...19.dll
windows10-2004-x64
1systemclea...�2.dll
windows7-x64
1systemclea...�2.dll
windows10-2004-x64
1systemclea...20.dll
windows7-x64
1systemclea...20.dll
windows10-2004-x64
1systemclea...21.dll
windows7-x64
1systemclea...21.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
systemcleaner/Crack.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
systemcleaner/Crack.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
systemcleaner/Skins/优美风格0.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
systemcleaner/Skins/优美风格0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
systemcleaner/Skins/优美风格1.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
systemcleaner/Skins/优美风格1.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
systemcleaner/Skins/优美风格10.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
systemcleaner/Skins/优美风格10.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
systemcleaner/Skins/优美风格11.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
systemcleaner/Skins/优美风格11.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
systemcleaner/Skins/优美风格12.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
systemcleaner/Skins/优美风格12.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
systemcleaner/Skins/优美风格13.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
systemcleaner/Skins/优美风格13.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
systemcleaner/Skins/优美风格14.dll
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
systemcleaner/Skins/优美风格14.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
systemcleaner/Skins/优美风格15.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
systemcleaner/Skins/优美风格15.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
systemcleaner/Skins/优美风格16.dll
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
systemcleaner/Skins/优美风格16.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
systemcleaner/Skins/优美风格17.dll
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
systemcleaner/Skins/优美风格17.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
systemcleaner/Skins/优美风格18.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
systemcleaner/Skins/优美风格18.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
systemcleaner/Skins/优美风格19.dll
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
systemcleaner/Skins/优美风格19.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
systemcleaner/Skins/优美风格2.dll
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
systemcleaner/Skins/优美风格2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
systemcleaner/Skins/优美风格20.dll
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
systemcleaner/Skins/优美风格20.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
systemcleaner/Skins/优美风格21.dll
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
systemcleaner/Skins/优美风格21.dll
Resource
win10v2004-20240802-en
General
-
Target
88f6ab35a1eaa6c51d5bddb665f42ba9_JaffaCakes118
-
Size
3.0MB
-
MD5
88f6ab35a1eaa6c51d5bddb665f42ba9
-
SHA1
8fe5892af4b0626b4d4594409f60b585c9d1aed9
-
SHA256
462ca12ae503a1b2bab0a3ec2a6135c694c13b9156d137755cb2c356e702879c
-
SHA512
ebcdbd716baf2468fb6ba5746f5206aa3cdf9b3271172b9fa43428a6776bbd67693d0662efe93193a23df3e8ade1e0d81b9c9f41ef4b16d8444d8b552010c043
-
SSDEEP
49152:mGjGOtsAv4MZWt6ijcW3smv1+w3xGQF7NQtv3H8pdiJ1kRdgGBppQLIdziyNjj:vKOtsG3Za6ijcW3b1+kFSv3c/iXkRn7f
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/systemcleaner/Crack.exe unpack001/systemcleaner/systemcleaner.exe
Files
-
88f6ab35a1eaa6c51d5bddb665f42ba9_JaffaCakes118.rar
-
systemcleaner/Crack.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 880KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
systemcleaner/Skins/优美风格0.dll
-
systemcleaner/Skins/优美风格1.dll
-
systemcleaner/Skins/优美风格10.dll
-
systemcleaner/Skins/优美风格11.dll
-
systemcleaner/Skins/优美风格12.dll
-
systemcleaner/Skins/优美风格13.dll
-
systemcleaner/Skins/优美风格14.dll
-
systemcleaner/Skins/优美风格15.dll
-
systemcleaner/Skins/优美风格16.dll
-
systemcleaner/Skins/优美风格17.dll
-
systemcleaner/Skins/优美风格18.dll
-
systemcleaner/Skins/优美风格19.dll
-
systemcleaner/Skins/优美风格2.dll
-
systemcleaner/Skins/优美风格20.dll
-
systemcleaner/Skins/优美风格21.dll
-
systemcleaner/Skins/优美风格22.dll
-
systemcleaner/Skins/优美风格23.dll
-
systemcleaner/Skins/优美风格24.dll
-
systemcleaner/Skins/优美风格25.dll
-
systemcleaner/Skins/优美风格26.dll
-
systemcleaner/Skins/优美风格27.dll
-
systemcleaner/Skins/优美风格28.dll
-
systemcleaner/Skins/优美风格29.dll
-
systemcleaner/Skins/优美风格3.dll
-
systemcleaner/Skins/优美风格30.dll
-
systemcleaner/Skins/优美风格31.dll
-
systemcleaner/Skins/优美风格32.dll
-
systemcleaner/Skins/优美风格33.dll
-
systemcleaner/Skins/优美风格34.dll
-
systemcleaner/Skins/优美风格35.dll
-
systemcleaner/Skins/优美风格36.dll
-
systemcleaner/Skins/优美风格37.dll
-
systemcleaner/Skins/优美风格38.dll
-
systemcleaner/Skins/优美风格39.dll
-
systemcleaner/Skins/优美风格4.dll
-
systemcleaner/Skins/优美风格40.dll
-
systemcleaner/Skins/优美风格41.dll
-
systemcleaner/Skins/优美风格42.dll
-
systemcleaner/Skins/优美风格43.dll
-
systemcleaner/Skins/优美风格44.dll
-
systemcleaner/Skins/优美风格45.dll
-
systemcleaner/Skins/优美风格46.dll
-
systemcleaner/Skins/优美风格47.dll
-
systemcleaner/Skins/优美风格48.dll
-
systemcleaner/Skins/优美风格49.dll
-
systemcleaner/Skins/优美风格5.dll
-
systemcleaner/Skins/优美风格50.dll
-
systemcleaner/Skins/优美风格51.dll
-
systemcleaner/Skins/优美风格52.dll
-
systemcleaner/Skins/优美风格53.dll
-
systemcleaner/Skins/优美风格54.dll
-
systemcleaner/Skins/优美风格55.dll
-
systemcleaner/Skins/优美风格56.dll
-
systemcleaner/Skins/优美风格57.dll
-
systemcleaner/Skins/优美风格58.dll
-
systemcleaner/Skins/优美风格6.dll
-
systemcleaner/Skins/优美风格7.dll
-
systemcleaner/Skins/优美风格8.dll
-
systemcleaner/Skins/优美风格9.dll
-
systemcleaner/Skins/默认风格.dll
-
systemcleaner/data/360Sou.dll
-
systemcleaner/data/3721.dll
-
systemcleaner/data/SooeAd.dll
-
systemcleaner/data/Vika.dll
-
systemcleaner/data/baidu.dll
-
systemcleaner/data/bocai.dll
-
systemcleaner/data/caixint.dll
-
systemcleaner/data/cdn.dll
-
systemcleaner/data/dudu.dll
-
systemcleaner/data/duoduo.dll
-
systemcleaner/data/ebay.dll
-
systemcleaner/data/fileclean.dll
-
systemcleaner/data/hbclient.dll
-
systemcleaner/data/henbang.dll
-
systemcleaner/data/huaci.dll
-
systemcleaner/data/pig.dll
-
systemcleaner/data/sogou.dll
-
systemcleaner/data/tianxia.dll
-
systemcleaner/data/u88.dll
-
systemcleaner/data/wmwyt.dll
-
systemcleaner/data/xiehe.dll
-
systemcleaner/data/yahoo.dll
-
systemcleaner/data/yisou.dll
-
systemcleaner/data/ylxk.dll
-
systemcleaner/data/yok.dll
-
systemcleaner/help.txt
-
systemcleaner/softnn.url.url
-
systemcleaner/systemcleaner.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 325KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
systemcleaner/systemcleaner.exe.manifest.xml
-
systemcleaner/systemcleaner.ini
-
systemcleaner/新云软件.url.url