Static task
static1
Behavioral task
behavioral1
Sample
华彩联盟论坛.url
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
华彩联盟论坛.url
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
华彩软件站-使用必读.url
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
华彩软件站-使用必读.url
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
博元迅雷离线下载10.05.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
博元迅雷离线下载10.05.exe
Resource
win10v2004-20241007-en
General
-
Target
2e64d718ac3a3c58ead09dbe676f3c8c_JaffaCakes118
-
Size
477KB
-
MD5
2e64d718ac3a3c58ead09dbe676f3c8c
-
SHA1
dfcacf6705a6fa772a7ebd5cc02a690b2fd03cea
-
SHA256
85830298edd3cc96a5f37d7422ac5b9140382813c6600984bf23d780b59d9ea2
-
SHA512
311d9db36903de217857ff02175f0651d803710292bca25737cfb14e624408a9d5d2f9111d0b8d376d5f07f31b0e1854ac9e9936d0a3de27722f14d848614236
-
SSDEEP
12288:oJAZv41J2tP9apiKWjYPHC8hjnZ5AZnVbdU1FlUYE:TdWgqQZ8BxngZVb4FlA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/博元迅雷离线下载10.05.exe
Files
-
2e64d718ac3a3c58ead09dbe676f3c8c_JaffaCakes118.rar
-
下载说明.txt
-
华彩联盟论坛.url.url
-
华彩软件站-使用必读.url.url
-
博元迅雷离线下载10.05.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 486KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE