Static task
static1
Behavioral task
behavioral1
Sample
31-A三刀秒杀.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31-A三刀秒杀.exe
Resource
win10v2004-20240802-en
General
-
Target
10c7fbe07b3a0706717ea46d6731fe6f_JaffaCakes118
-
Size
721KB
-
MD5
10c7fbe07b3a0706717ea46d6731fe6f
-
SHA1
57f35078ca86d1292907ec1e5c51e9831e497b0a
-
SHA256
2134fec0ec34df58983f1e8356c59144be96b4b02d19c3e3ae62c724720d05b6
-
SHA512
f621f6195596b18cff290305ee2ccdfe167e581813c73b1219a825fa86939ca55399aef3edd1cf23542d36c4a41c1a153f7fa8b71ed80c2fe5499e2e7c34c03d
-
SSDEEP
12288:L8GHxAPRYHgV0a4OOgOKQOFpjYde/L9zWr4PNQ4JsEle2VKzx3:AZOHy0aFE3OnkQ9K4J1pVKzd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/31-A三刀秒杀.exe
Files
-
10c7fbe07b3a0706717ea46d6731fe6f_JaffaCakes118.rar
-
31-A三刀秒杀.exe.exe windows:5 windows x86 arch:x86
c5e3a5a2b4fd806c87fe1109ab7aba68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32 winmm
TabbedTextOutA �B
Sections
.text Size: 492KB - Virtual size: 956KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp Size: 400KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
说明.txt