Behavioral task
behavioral1
Sample
QQ38下载.url
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
QQ38下载.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
狂魔游戏助手Ver0.5.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
狂魔游戏助手Ver0.5.exe
Resource
win10v2004-20240802-en
General
-
Target
012f250e08dd3152e3abe2b4c856136f_JaffaCakes118
-
Size
1013KB
-
MD5
012f250e08dd3152e3abe2b4c856136f
-
SHA1
9511c294c9be0e4fcb2bb2d55734386938ffc254
-
SHA256
0230f8fd9baba6a95b06804eb521c089fe7ff05e7fe5be48ad96e81d1d9b16dd
-
SHA512
76fe33b9ca1c2febb2f118f04b030a927d37b2972f849282444822374ad2354f02ef73212a7198b6518a6ead7b93d43028ac93ce3e5ebedd1cf160882398411f
-
SSDEEP
24576:rapSjjWoXQrBMnGXA6giL47FDeP0+Z/anqNnFc:rgEjNXCiliLGK7cq0
Malware Config
Signatures
-
resource yara_rule static1/unpack001/狂魔游戏助手Ver0.5.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/狂魔游戏助手Ver0.5.exe
Files
-
012f250e08dd3152e3abe2b4c856136f_JaffaCakes118.rar
-
QQ38下载.url.url
-
下载说明.txt
-
狂魔游戏助手Ver0.5.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 888KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 909KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�W�sC` Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE