Static task
static1
Behavioral task
behavioral1
Sample
Zhn-x560.exe
Resource
win7-20240704-en
General
-
Target
46231fcc999398aabe75d59b82431ba4_JaffaCakes118
-
Size
802KB
-
MD5
46231fcc999398aabe75d59b82431ba4
-
SHA1
a87f672ba3137c2e7ccf438dc3426bc3a3c54f03
-
SHA256
1033aefc071d6249320695a584a5db2c39117c3e3d6635423d560ce3edfc2382
-
SHA512
309d7741a287d1ff9ad2c8f7526b2e177d97738fa8c579adcb76ed082e2eec3c3b234c2bcd4ab716afe75aa4fc05fa755a6fe4e82b03744a682c4327a07fbbbc
-
SSDEEP
12288:TscFjo1L0rKfoHCR5xYSLe7ge9bhnKBlGkYNKiXfcoP1NlEkOiOfHXqyJL2K9RUA:fFrKfaCEgobylKKiX0qwk6HZsKvb3j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Zhn-x560.exe
Files
-
46231fcc999398aabe75d59b82431ba4_JaffaCakes118.zip
-
Zhn-x560.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 783KB - Virtual size: 783KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 262KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ