Static task
static1
Behavioral task
behavioral1
Sample
QQGameDu.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
QQGameDu.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240802-en
General
-
Target
feb4a7f14bd2012a6298d5edfd3ee98e_JaffaCakes118
-
Size
203KB
-
MD5
feb4a7f14bd2012a6298d5edfd3ee98e
-
SHA1
8fcd262d974b92f65cf8779e45f3bb5fac774ba9
-
SHA256
a101e1e642c35b7afd494e24a20c52683368d77407760e324f72753fb948f64b
-
SHA512
adea9652d68bb44250d8c66cb0d7a62f458a02d42e3dfa843437bf1d4fdadf5fc2218e7375ffbcf46c160e525bccf0e537d88eb19a9cc88324a21f218fe490e8
-
SSDEEP
3072:lr34Y2uO1g4vChw+DgVWiUyy8yvNtsTxD8a7+G5MCKLhHuk8FNSmwF3P67Brl86:lr34uOy4xVy8WNtsFDRHJvTISb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QQGameDu.exe
Files
-
feb4a7f14bd2012a6298d5edfd3ee98e_JaffaCakes118.rar
-
QQGameDu.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��U0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��U1 Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
新云软件.url.url