Behavioral task
behavioral1
Sample
两点内插程序 V1.0/两点内插程序 V1.0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
两点内插程序 V1.0/两点内插程序 V1.0.exe
Resource
win10v2004-20240419-en
General
-
Target
087b740dd5a59c755a4ae63f5cf326fe_JaffaCakes118
-
Size
13KB
-
MD5
087b740dd5a59c755a4ae63f5cf326fe
-
SHA1
90e567306423dc66d3af6b62510b2ae0015d2264
-
SHA256
ffd89648c8ca4d306c3181edda19d4450df2653178bdafed269d636953ed37dc
-
SHA512
8657eac887f2215d9c101e17773b096c101975231e2bc851da7e9b05c60d0aca32f4dc6948b7772738b407386f67523b393b211cb10d1a69aa06e3f3b60942f0
-
SSDEEP
384:VPK4P3T6gm+/cHlqwqzBENLxZ6f+TnLfT:Xb6g+HALcPH
Malware Config
Signatures
-
resource yara_rule static1/unpack001/两点内插程序 V1.0/两点内插程序 V1.0.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/两点内插程序 V1.0/两点内插程序 V1.0.exe
Files
-
087b740dd5a59c755a4ae63f5cf326fe_JaffaCakes118.rar
-
两点内插程序 V1.0/两点内插程序 V1.0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE