Static task
static1
Behavioral task
behavioral1
Sample
下载软件_免费下载单机游戏_手机游戏下载大全_psp游戏_下载快播_九号塔下载.url
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
下载软件_免费下载单机游戏_手机游戏下载大全_psp游戏_下载快播_九号塔下载.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
浪漫庄园无限体力.exe
Resource
win7-20240729-en
General
-
Target
fefb515092164dfd333f164726c89a2c_JaffaCakes118
-
Size
341KB
-
MD5
fefb515092164dfd333f164726c89a2c
-
SHA1
2639ae300b5e69f92ca481c9caa7c37297615b43
-
SHA256
f4457dcb5663d13029189233963cd4d14b7a5450afe77cacdcd689f57d24ba5b
-
SHA512
40349111b8edee3eafd47c92071fc0e197716bc43f7194982a5f0d39dd685be7b2a117bca7e17ca52766c97f4957d32a73b7b9c413bc7b50b5ed3bdfa0279d55
-
SSDEEP
6144:6S5wTlokAP4esxpYdiTsFMDAoBFUaW9XO0XmJa2lXUoGzaRDsuIct:n5swsx248eAoi9X3XmJa2dpGzaRI92
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/浪漫庄园无限体力.exe
Files
-
fefb515092164dfd333f164726c89a2c_JaffaCakes118.rar
-
下载软件_免费下载单机游戏_手机游戏下载大全_psp游戏_下载快播_九号塔下载.url.url
-
九号塔下载说明.txt
-
浪漫庄园无限体力.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 343KB - Virtual size: 349KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE