Static task
static1
Behavioral task
behavioral1
Sample
DNF简/155绿色软件站.url
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
DNF简/155绿色软件站.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
DNF简/简1.3.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
DNF简/简1.3.exe
Resource
win10v2004-20240802-en
General
-
Target
8eabc8b5b7ce277a5de0f7397bef1962_JaffaCakes118
-
Size
2.1MB
-
MD5
8eabc8b5b7ce277a5de0f7397bef1962
-
SHA1
a64162977a771b1770da902953163cd463df1614
-
SHA256
60a7e06c2b33c5823a17d1076d0a6e020eec4eda6e5742bef298662879889e1e
-
SHA512
990623b0b0cb25c3ca44b345c756f1fa4f49318e670f5893385728fb5e683b1f04cc856cffd948e43a536c1f229513d2ee79d3a61959503fddda7e2e5ca6c10d
-
SSDEEP
49152:wkj+Xdyyyi2RE0PphkwBvGCxf7xp843TPy4Hr1XY4Ma+P:wdtw1RE0Bewt57Z3PNJg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DNF简/简1.3.exe
Files
-
8eabc8b5b7ce277a5de0f7397bef1962_JaffaCakes118.rar
-
DNF简/155绿色软件站.url.url
-
DNF简/使用说明.txt
-
DNF简/注册码.reg
-
DNF简/简1.3.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
e7Lfk0wR Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jMdZtCcL Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
VoeDAHKR Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HNDe85ZY Size: 700B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DNBexbGm Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ