Behavioral task
behavioral1
Sample
Avi4Bmp.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Avi4Bmp.exe
Resource
win10v2004-20240426-en
General
-
Target
8d87ca62a251c5f7d3bea9b3ebae7ac6_JaffaCakes118
-
Size
162KB
-
MD5
8d87ca62a251c5f7d3bea9b3ebae7ac6
-
SHA1
87ea458008a218ca7d3ed1ba74ea3dbc462e7937
-
SHA256
5757b2bf92a33fa30bad0bd1b4e5c1d0ed8a1240c5c40242c3ff183c95632e9b
-
SHA512
f1143963e01d6e044d4c03e4f92f25c6a6d06cbda36dd46427e7bbcab4ddf6b545074e964ed5468e415f76071cf92abc0298afaee1439a0f28991b107864aa03
-
SSDEEP
3072:Br8izW6y4/k8Jehz68uPk4qh3lSQMOgWapQy7VHSvFnG+ac7QKik58FTRdB3v:Wizxy4/k8Je9OPklhxMOgWiQy7Vanb70
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Avi4Bmp.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Avi4Bmp.exe unpack002/out.upx
Files
-
8d87ca62a251c5f7d3bea9b3ebae7ac6_JaffaCakes118.zip
-
AVI4BMP_ReadMe.txt
-
Avi4Bmp.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 240KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ