Behavioral task
behavioral1
Sample
极智截图软件2011/新云软件.url
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
极智截图软件2011/新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
极智截图软件2011/极智截图软件2011.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
极智截图软件2011/极智截图软件2011.exe
Resource
win10v2004-20240802-en
General
-
Target
d00515972a13cafafd023cceb4d51345_JaffaCakes118
-
Size
251KB
-
MD5
d00515972a13cafafd023cceb4d51345
-
SHA1
faf6d29487fbd05f95a0f76ac1d6eb704104f3a5
-
SHA256
ac849cf6d53f9191807d8c7503321f217daaa35aabb134bef3002ed2c1b0193f
-
SHA512
abd76674eeddab5ea5f5e6cf88040beec9809da35326bb601c7a856241fd309c0df839d00278a52773f715cf2033743a336ba5bcaf811b2d7c6020cd13b79566
-
SSDEEP
6144:+qfiNwm1L/cJB0a1d9XQhZOdsTf3wv3X10rIZuA3RMSDzkNUAQQ:+ci2m1c4av9AjGsT3w/10rIZuABVkNFz
Malware Config
Signatures
-
resource yara_rule static1/unpack001/极智截图软件2011/极智截图软件2011.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/极智截图软件2011/极智截图软件2011.exe
Files
-
d00515972a13cafafd023cceb4d51345_JaffaCakes118.rar
-
极智截图软件2011/新云软件.url.url
-
极智截图软件2011/极智截图软件2011.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 192KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE