Overview
overview
3Static
static
3menghuanxi...��.url
windows7-x64
1menghuanxi...��.url
windows10-2004-x64
1menghuanxi...��.htm
windows7-x64
3menghuanxi...��.htm
windows10-2004-x64
3menghuanxi....0.exe
windows7-x64
3menghuanxi....0.exe
windows10-2004-x64
3menghuanxi...��.url
windows7-x64
1menghuanxi...��.url
windows10-2004-x64
1menghuanxi...��.url
windows7-x64
1menghuanxi...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
menghuanxiyouguaji/下载-比ACDSEE还强的图像软件.url
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
menghuanxiyouguaji/下载-比ACDSEE还强的图像软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
menghuanxiyouguaji/必看说明.htm
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
menghuanxiyouguaji/必看说明.htm
Resource
win10v2004-20240910-en
Behavioral task
behavioral5
Sample
menghuanxiyouguaji/梦幻西游挂机辅助器 v1.0.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
menghuanxiyouguaji/梦幻西游挂机辅助器 v1.0.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
menghuanxiyouguaji/河源下载站.url
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
menghuanxiyouguaji/河源下载站.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
menghuanxiyouguaji/用firefox浏览器上网更安全.url
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
menghuanxiyouguaji/用firefox浏览器上网更安全.url
Resource
win10v2004-20240802-en
General
-
Target
1098808bb6151d94700ba046572c4495_JaffaCakes118
-
Size
712KB
-
MD5
1098808bb6151d94700ba046572c4495
-
SHA1
9e47ed014bf2317461512675e610da6054154270
-
SHA256
0cf161821f215d3f26f2339ae972dc2ac9183c8a1682ec4de50c9102221e8276
-
SHA512
7817736387e604e35358f81d7648bc6cc5b5d279a505a75ebd161e4c700a9c8bcfe131ddb41111f5fa339fdeb1c28bb4b46929477571e9b0f70bb3897b55d634
-
SSDEEP
12288:HsIeKZRmmvIHpCXiuq0vDR4KcLLaMN2gAO0v0OUvbbGF6E5cyY8Lba0/vnhn:MRKZRmoIi26DudLa5bKHGc4cyYy7vt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/menghuanxiyouguaji/梦幻西游挂机辅助器 v1.0.exe
Files
-
1098808bb6151d94700ba046572c4495_JaffaCakes118.rar
-
menghuanxiyouguaji/下载-比ACDSEE还强的图像软件.URL.url
-
menghuanxiyouguaji/安装使用说明.txt
-
menghuanxiyouguaji/必看说明.htm
-
menghuanxiyouguaji/梦幻西游挂机辅助器 v1.0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
menghuanxiyouguaji/河源下载站.url.url
-
menghuanxiyouguaji/河源下载站Cngr.cn说明.txt
-
menghuanxiyouguaji/用firefox浏览器上网更安全.URL.url