Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
终极宽带连接快速生成器 V1.0.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
终极宽带连接快速生成器 V1.0.exe
Resource
win10v2004-20240802-en
General
-
Target
d43798fc9ef280646165cc0195daf975_JaffaCakes118
-
Size
42KB
-
MD5
d43798fc9ef280646165cc0195daf975
-
SHA1
625ddda21b8c3f061f4ee090d9be5c4636133646
-
SHA256
86b542f0685dbc8da9649503bc70dbc0e1596c89aa339a752b62c27d19b5c1f0
-
SHA512
bd345622fdf0131240e8645df607824217c5e2c3d0dbe9bcb9446804f15f133ef6b9bd8e9273be2c01d5b461808502734e0c81bb95e1cc22fd2e5459b681bb30
-
SSDEEP
768:/E/GGw5fToZ17IOrpeCAUI76ym5OXB793NgrWlZYSZhqb0o7A+H1XL:/E/GNton7VrpeCAU95aBpNsWl+Ghi0or
Malware Config
Signatures
-
resource yara_rule static1/unpack001/终极宽带连接快速生成器 V1.0.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/终极宽带连接快速生成器 V1.0.exe
Files
-
d43798fc9ef280646165cc0195daf975_JaffaCakes118.rar
-
155绿色软件站.url.url
-
终极宽带连接快速生成器 V1.0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE