Behavioral task
behavioral1
Sample
textures.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
textures.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
乐趣下载.url
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
乐趣下载.url
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
使用说明.url
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
使用说明.url
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
星系制作.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
星系制作.exe
Resource
win10v2004-20241007-en
General
-
Target
525b78a9bc720018825b69aa891ee283_JaffaCakes118
-
Size
441KB
-
MD5
525b78a9bc720018825b69aa891ee283
-
SHA1
ba8b822fed9b9a6a67a282fc3b00688eab32bdf1
-
SHA256
5b576943b2818f2af03011615d1fa7d56ac50403fe9ebe2555e10b2186687659
-
SHA512
b04b012d543b112c8eb81be836676f6a7138f9bcca345a2c66a4d95c03e7087233213ae03cd4fbf87766c733f27e897209b36f986336cca0c65613e05af3f7c2
-
SSDEEP
6144:GBaO80V4bijeLrDOMgqOzZ2BT/pUsHje7+zyfrHqf5dYnNOqRQBEll30VZO:YHWOa/3BLpUjdjqhasqRQ2b0VE
Malware Config
Signatures
-
resource yara_rule static1/unpack001/textures.dll aspack_v212_v242 static1/unpack001/星系制作.exe aspack_v212_v242 -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/textures.dll unpack001/星系制作.exe
Files
-
525b78a9bc720018825b69aa891ee283_JaffaCakes118.rar
-
Textures/Galaxy/Picasa.ini
-
Textures/Galaxy/多种色调.jpg.jpg
-
Textures/Galaxy/橙色和蓝色.jpg.jpg
-
Textures/Galaxy/红色.jpg.jpg
-
Textures/Galaxy/红色和紫色.jpg.jpg
-
Textures/Galaxy/纯色.jpg.jpg
-
Textures/Galaxy/绿色.jpg.jpg
-
Textures/Galaxy/绿色并带有星辰.jpg.jpg
-
Textures/Galaxy/蓝色和紫色.jpg.jpg
-
Textures/Stars/Picasa.ini
-
Textures/Stars/带有光晕的恒星.jpg.jpg
-
Textures/Stars/带有光环的恒星.jpg.jpg
-
Textures/Stars/暗星.jpg.jpg
-
Textures/Stars/椭圆形 E0.jpg.jpg
-
Textures/Stars/群星.jpg.jpg
-
textures.dll.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
乐趣下载.url
-
使用说明.url
-
星系制作.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 211KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 22KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oli Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE