Behavioral task
behavioral1
Sample
wbssl/五笔打字随手练免安装版1.0.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
wbssl/五笔打字随手练免安装版1.0.exe
Resource
win10v2004-20240709-en
General
-
Target
3a2900a2994a701ada5f3c83a7f9174d_JaffaCakes118
-
Size
2.1MB
-
MD5
3a2900a2994a701ada5f3c83a7f9174d
-
SHA1
00d5ab30fa46728abe93857f420104f1763aefed
-
SHA256
d0cc5f2e498fe8b490f2c204ccd4d689f1d308b0aa40543f5e5499464b8e5db1
-
SHA512
c9247f2ce98f44d1d76ab0c2102cccc93e1e8ed0b15d9a1d66956b7922fa6c4de7ae47e5f8907d61d48deedc0ce3851936c7d9bf3ec65909ce51954ad46ac2c9
-
SSDEEP
49152:3v5WPzAqMo8baZJoaDKp7XBnJdMqQZgmcDJeqWQ4T5RuDdZ6kB9o:3v5WP8+8bkuVp7LdMqQZgmcDJr6T5REq
Malware Config
Signatures
-
resource yara_rule static1/unpack001/wbssl/五笔打字随手练免安装版1.0.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/wbssl/五笔打字随手练免安装版1.0.exe
Files
-
3a2900a2994a701ada5f3c83a7f9174d_JaffaCakes118.rar
-
wbssl/五笔打字随手练免安装版1.0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 408KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE