Behavioral task
behavioral1
Sample
角摩電子書製作軟體(繁中版)990404/JoymoBook.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
角摩電子書製作軟體(繁中版)990404/JoymoBook.exe
Resource
win10v2004-20240802-en
General
-
Target
d206d97618c3944a170ab2e59ae91e86_JaffaCakes118
-
Size
216KB
-
MD5
d206d97618c3944a170ab2e59ae91e86
-
SHA1
225a8f368ec3ecb2fe0a9e93556d59c9f89be698
-
SHA256
cd344b34d791a42e509fe2add75e65ca14b3d3883b8bbf6ee26508f89fe5b3af
-
SHA512
0afe6154098351328653a8375109cded0d959cd74d2d15e5d9b968db603535341a91e57fcd226ae438e24337cde406d892f514661638de47338e233d9dbfecbf
-
SSDEEP
6144:S9IKPycX8f2LcI0115PCXbrGLbsol2TmoYC:S9IKPyS8zIG5PCXp7T1f
Malware Config
Signatures
-
resource yara_rule static1/unpack001/角摩電子書製作軟體(繁中版)990404/JoymoBook.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/角摩電子書製作軟體(繁中版)990404/JoymoBook.exe
Files
-
d206d97618c3944a170ab2e59ae91e86_JaffaCakes118.rar
-
角摩電子書製作軟體(繁中版)990404/2.jm
-
角摩電子書製作軟體(繁中版)990404/JMBook.dat.zip
-
JavaBook.class
-
a.class
-
b.class
-
c.class
-
d.class
-
e.class
-
f.class
-
g.class
-
h.class
-
i.class
-
j.class
-
jm.PNG.png
-
k.class
-
l.class
-
m.class
-
n.class
-
角摩電子書製作軟體(繁中版)990404/JoymoBook.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 149KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
角摩電子書製作軟體(繁中版)990404/joymo.ini
-
角摩電子書製作軟體(繁中版)990404/使用說明.txt