Static task
static1
Behavioral task
behavioral1
Sample
QQ群信息速查.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
QQ群信息速查.exe
Resource
win10v2004-20240802-en
General
-
Target
a53e9f86e31b9c5528eef4c82ba19c82_JaffaCakes118
-
Size
207KB
-
MD5
a53e9f86e31b9c5528eef4c82ba19c82
-
SHA1
d415e122c7a9fa048eeee85f4c6019e02d919471
-
SHA256
3a97033fecc44e10e54cf52b10787d1f852c6053fa595b4cf08ae16df9817c3f
-
SHA512
17dd4cd46cc9b727d93b8c42c70254554d73b630f4fc9287da7366e15df0f000c3a07df67b384698ad23219398c8e84c9eaf6f4e9c32b9d80e3b6cc62e0275c2
-
SSDEEP
3072:APoN31jyEKKhixJ1vUnbTNDAL6Z07cIhdJMNUzfN6gl5HoUh/kZsC7wjGYR8zPcc:APovVkfMJwtdh7Mgga/kno9F646
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QQ群信息速查.exe
Files
-
a53e9f86e31b9c5528eef4c82ba19c82_JaffaCakes118.rar
-
QQ群信息速查.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 213KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
下载说明.htm.html .js polyglot