Static task
static1
Behavioral task
behavioral1
Sample
HA_CSplayer0.71_LRH.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
HA_CSplayer0.71_LRH.exe
Resource
win10v2004-20240802-en
General
-
Target
8e595b6b6a4e43ca861b1e043c787bc5_JaffaCakes118
-
Size
992KB
-
MD5
8e595b6b6a4e43ca861b1e043c787bc5
-
SHA1
9b621d597ecb1130519108f3857ed9a1c08feb0c
-
SHA256
9a79d75a8d6b469006695aa14e0adf6fe63e8265ea378c2c0dec0f1ef72ad754
-
SHA512
22f4f37f3740a30421b73a40a77752004b198b8f0384a07ae15dd8c8841bb9426ba0f8dc9fb58260fcb638cd31b194125774b643f8e91b678a2e71a6b20d5dfb
-
SSDEEP
24576:Ai/db+kcdI3zekQoPs9Q9zEupCe9rGmdhD7Ev/X0:t/YN0ze0s9wn9rBHS/k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_CSplayer0.71_LRH.exe
Files
-
8e595b6b6a4e43ca861b1e043c787bc5_JaffaCakes118.rar
-
CSplayer_0.71.JPG.jpg
-
HA_CSplayer0.71_LRH.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 272KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
-
下载说明.htm.html .js polyglot
-
汉化说明.txt