Behavioral task
behavioral1
Sample
研究生教务管理 v2.0(SQL)/setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
研究生教务管理 v2.0(SQL)/setup.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
研究生教务管理 v2.0(SQL)/安装说明.doc
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
研究生教务管理 v2.0(SQL)/安装说明.doc
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
研究生教务管理 v2.0(SQL)/管理员使用说明.doc
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
研究生教务管理 v2.0(SQL)/管理员使用说明.doc
Resource
win10v2004-20240802-en
General
-
Target
ce6c97bee66576be7ae1718045549167_JaffaCakes118
-
Size
6.0MB
-
MD5
ce6c97bee66576be7ae1718045549167
-
SHA1
76e5e00abe1c5969ba42151c838484ca3e520333
-
SHA256
29720ecdf09da8881e312a235234b5d544d356aede231c16b24fb2f2d13068fc
-
SHA512
5228c3aff3c9be9aae7b6624e11b9157fee6012f4a1afad2189920779315642786a70f837ed0af4e9ac0f52b6fdfa9d4e0b7b78c5e0ccd9f798759428f9aef91
-
SSDEEP
98304:wp5SCSu23ttD6gyCKYizaf06ObGzpGP6XWJi9dJwz7/mDVuO5xfmyziC2RfaAxIp:wp5SCSu23tlSCHimcjizcyXwi/Jwz7i1
Malware Config
Signatures
-
resource yara_rule static1/unpack001/研究生教务管理 v2.0(SQL)/setup.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/研究生教务管理 v2.0(SQL)/setup.exe
Files
-
ce6c97bee66576be7ae1718045549167_JaffaCakes118.rar
-
研究生教务管理 v2.0(SQL)/setup.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 271KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 77KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 489KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
研究生教务管理 v2.0(SQL)/下载说明.htm.html .js polyglot
-
研究生教务管理 v2.0(SQL)/安装说明.doc.doc windows office2003
-
研究生教务管理 v2.0(SQL)/帮助.txt
-
研究生教务管理 v2.0(SQL)/数据备份
-
研究生教务管理 v2.0(SQL)/管理员使用说明.doc.doc windows office2003