Static task
static1
Behavioral task
behavioral1
Sample
麻将外挂.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
麻将外挂.exe
Resource
win10v2004-20241007-en
General
-
Target
25a0ed5c43e803c85020e3c5228c1e88_JaffaCakes118
-
Size
39KB
-
MD5
25a0ed5c43e803c85020e3c5228c1e88
-
SHA1
80025215fd79e06f8c92761d8fffe2694edc5c7a
-
SHA256
a5e1cce5e67a7294994131a5807edb13d66d58580237eeb010f80211fc6f59f1
-
SHA512
8d86ffdf3085e9592d609487d0aa41d186593cd116ec4cadf4fa3edd301e55e914b75b667aea5db1bad0430676129d6ab2b64121234e75d4ff02e35c3511ba80
-
SSDEEP
768:P7OAJ44f5j44R4UHz7/sdiV7uV9UukoeBV4Anaco9aqWvACfdKHtuIp2:PRK4f5j44NzFcOuKBV/r573KHo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/麻将外挂.exe
Files
-
25a0ed5c43e803c85020e3c5228c1e88_JaffaCakes118.rar
-
麻将外挂.exe.exe windows:4 windows x86 arch:x86
2f3c5da38e687ed8e68cd2b55dbd54f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE