Behavioral task
behavioral1
Sample
所有小软件列表!.url
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
所有小软件列表!.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
路由器设置助手3.3.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
路由器设置助手3.3.exe
Resource
win10v2004-20240802-en
General
-
Target
11a314b11fd56eccc1feb508102c8865_JaffaCakes118
-
Size
403KB
-
MD5
11a314b11fd56eccc1feb508102c8865
-
SHA1
1cd8d40f27a05a3ca516f55eadaa2fd06b051161
-
SHA256
93169c622cc2e48b35f92e1e47709980aba41d28f2686d47d5ec422da6c25213
-
SHA512
f90992b59906d7704a96d435f650663d9381399ed7894c23b17b8849aee10869b8f068d141cd90dc72879e1d1baf14801a12215fcc7b5954a7147c4eb3efca03
-
SSDEEP
6144:1Jmn/MWppMX5BCgfhnKpVd0dPrH9LDuW2/8jhQJ5R45ncsLw:i/MW/MJBCCyd0dPrdxbYR45csE
Malware Config
Signatures
-
resource yara_rule static1/unpack001/路由器设置助手3.3.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/路由器设置助手3.3.exe
Files
-
11a314b11fd56eccc1feb508102c8865_JaffaCakes118.7z
-
logo.gif.gif
-
所有小软件列表!.url.url
-
说明.txt
-
路由器设置助手3.3.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 274KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 77KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE