Static task
static1
Behavioral task
behavioral1
Sample
Windows设置大师注册机.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Windows设置大师注册机.exe
Resource
win10v2004-20240802-en
General
-
Target
fa3572df96d11804455e84a6a7691ebe_JaffaCakes118
-
Size
5.4MB
-
MD5
fa3572df96d11804455e84a6a7691ebe
-
SHA1
fd1ba3a8131ee334f7a0f0ddac77db693f5f9add
-
SHA256
cb051939d45183e4c650ae06484783081144bbe0128afecb415cc77d4c5f4f08
-
SHA512
dc0c357d8b8ccf985398308ecc1106afd2773c88004c445713fe35f02b214de1c0be3ec436f8e356667d3e559287fdb1a5e91d27fece7268a652c8854d3a6a55
-
SSDEEP
98304:/MZ1iPYvYSEyky1Cy4hO1YUkJ7LBv2B0dGXBydilka5pwgd+IU2pIYyxJEe8qIMS:6yYASEOTkPYLxydQprU2pI9zEe8qIhL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Windows设置大师注册机.exe
Files
-
fa3572df96d11804455e84a6a7691ebe_JaffaCakes118.rar
-
Winszds/1.rar.rar
-
Windows设置大师注册机.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
KeyMake Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AntiKill Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE