Static task
static1
Behavioral task
behavioral1
Sample
电脑语音控制专家 V7.00/帮助.htm
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
电脑语音控制专家 V7.00/帮助.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
电脑语音控制专家 V7.00/新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
电脑语音控制专家 V7.00/新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
电脑语音控制专家 V7.00/电脑朗读大师.exe
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
电脑语音控制专家 V7.00/电脑朗读大师.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
电脑语音控制专家 V7.00/电脑语音控制专家V7.00.exe
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
电脑语音控制专家 V7.00/电脑语音控制专家V7.00.exe
Resource
win10v2004-20240802-en
General
-
Target
c87d0c9d30c3c5de568507e18d68ef78_JaffaCakes118
-
Size
1.8MB
-
MD5
c87d0c9d30c3c5de568507e18d68ef78
-
SHA1
986dfd60602581fdab63930a0c4244bea04638c1
-
SHA256
5c544592657987301e751f407bc72541beed6ef27384cf57874690e95355e7cc
-
SHA512
ee08f3d2c9785ea8e2bd6bae46aef03afbc3473e1768468135dde638f0f18e613cc12cb91b5d10fbcb7163fa35da26354b392b12b40abab8a42f699f9b57f280
-
SSDEEP
24576:5G3nGKpD1Xdt/zW5CFUmNLLS5NAQPYexKSZk+2wAjED7s2rfff2AbRH5dF/51B1N:7KpxXzRNLOxPlKSxZD7s2DfhBp/BD
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/电脑语音控制专家 V7.00/电脑朗读大师.exe unpack001/电脑语音控制专家 V7.00/电脑语音控制专家V7.00.exe
Files
-
c87d0c9d30c3c5de568507e18d68ef78_JaffaCakes118.rar
-
电脑语音控制专家 V7.00/1.txt
-
电脑语音控制专家 V7.00/内置命令使用说明.txt
-
电脑语音控制专家 V7.00/命令集/命令集数 .ini
-
电脑语音控制专家 V7.00/命令集/默认命令集.ini
-
电脑语音控制专家 V7.00/备用网站表.ini
-
电脑语音控制专家 V7.00/帮助.htm.html
-
电脑语音控制专家 V7.00/新云软件.url.url
-
电脑语音控制专家 V7.00/电脑朗读大师.exe.exe windows:4 windows x86 arch:x86
65ae5cf17140aeaf91e3e9911da0ee3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateDirectoryA
GetTempPathA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW
user32
MessageBoxA
wsprintfA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ecode Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
电脑语音控制专家 V7.00/电脑语音控制专家V7.00.exe.exe windows:4 windows x86 arch:x86
65ae5cf17140aeaf91e3e9911da0ee3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateDirectoryA
GetTempPathA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW
user32
MessageBoxA
wsprintfA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ecode Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
电脑语音控制专家 V7.00/界面图片/0.jpg.jpg
-
电脑语音控制专家 V7.00/界面图片/1.jpg.jpg
-
电脑语音控制专家 V7.00/界面图片/2.jpg.jpg
-
电脑语音控制专家 V7.00/界面图片/3.jpg.jpg
-
电脑语音控制专家 V7.00/界面图片/4.jpg.jpg
-
电脑语音控制专家 V7.00/界面图片/Thumbs.db