Static task
static1
Behavioral task
behavioral1
Sample
ysysygjjj/预算员实用工具集锦.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ysysygjjj/预算员实用工具集锦.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
预算员实用工具集锦下载 v1.0绿色版_ - pc6下载站.url
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
预算员实用工具集锦下载 v1.0绿色版_ - pc6下载站.url
Resource
win10v2004-20241007-en
General
-
Target
36b5771d5d21bcba635aa160a8f35cc5_JaffaCakes118
-
Size
808KB
-
MD5
36b5771d5d21bcba635aa160a8f35cc5
-
SHA1
8a487aa4aa1408c38a03eeae999b717999478482
-
SHA256
5d3eee3ca1c700208479b4e1e3a161f1002c8b11ed9185f30695ac61e41dd002
-
SHA512
2e8e7b8b58252aa05f4e7bfe314fba5692751be01dfde5358a1647bfb941878ba5b7ef176e6104878ea63f17147797e1b07b5f711ff2a0f67309c07f10149c0c
-
SSDEEP
24576:bHJ/6UrpJmYVgGXKH6Y5fdNFQPgKposMuXep9N1OR9:1/6ypJdgGa7VNFSgKposrep9Ls9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ysysygjjj/预算员实用工具集锦.exe
Files
-
36b5771d5d21bcba635aa160a8f35cc5_JaffaCakes118.rar
-
ysysygjjj/预算员实用工具集锦.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
使用说明.txt
-
预算员实用工具集锦下载 v1.0绿色版_ - pc6下载站.url.url