Behavioral task
behavioral1
Sample
2月13号透视/至尊狂龙透视v2.7版.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2月13号透视/至尊狂龙透视v2.7版.exe
Resource
win10v2004-20240709-en
General
-
Target
42fa7a41d618d766941318be1e35ffea_JaffaCakes118
-
Size
988KB
-
MD5
42fa7a41d618d766941318be1e35ffea
-
SHA1
305732be0f90d2feb9dc5b99ac02466e48c8436f
-
SHA256
ad5fc16bc567f5d188ab9f3e3eac9c24b0f1b19a86628f30a4600421d28531ff
-
SHA512
23d8406c184aee4b5232b7232197092a7b33cb76205278475c00eab9774ef454902d5e9e25c4938baf74e1e223f893661c61313cd099f9a0fce60209c61bf151
-
SSDEEP
24576:6Q/bxbQEW7SxQXBvo3vxvvKbzgHWc+D4TnxEPRwh:5jbW7rBAfxvvgaDgwh
Malware Config
Signatures
-
resource yara_rule static1/unpack001/2月13号透视/至尊狂龙透视v2.7版.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2月13号透视/至尊狂龙透视v2.7版.exe
Files
-
42fa7a41d618d766941318be1e35ffea_JaffaCakes118.rar
-
2月13号透视/至尊狂龙透视v2.7版.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 423KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 809B - Virtual size: 1003B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE