Behavioral task
behavioral1
Sample
Black-Rock Shooter/Black-Rock Shooter 2012 by ~hoangtush.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Black-Rock Shooter/Black-Rock Shooter 2012 by ~hoangtush.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Black-Rock Shooter/Style.exe
Resource
win7-20240704-en
General
-
Target
66d4587521fecd4d032f58adc5821762_JaffaCakes118
-
Size
689KB
-
MD5
66d4587521fecd4d032f58adc5821762
-
SHA1
385ddc0f1f21e87f9a8b9a69cae2dfbe74c40c60
-
SHA256
f831ab1b8583bcf474484a8cf4d236f368f69cc9e25c65ae694edd8094e43b62
-
SHA512
a8da5dbbef6668d5b497b8359063726cb86681d4ec3b932802646aafa1edccb873a5549b7903a69485c46ebc969f062b0b50edddd8bc05180f0c28c4963bea8e
-
SSDEEP
12288:cDxcdJIB2RuE78TRDI78nvkKJsUkM7bWyJj9k8X4r4NRiJKjisxRJxAZdZV:aHBKF4Q8cNMvu8NRwKjJz4
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Black-Rock Shooter/Style.exe upx -
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Black-Rock Shooter/Black-Rock Shooter 2012 by ~hoangtush.exe unpack001/Black-Rock Shooter/Style.exe unpack002/out.upx
Files
-
66d4587521fecd4d032f58adc5821762_JaffaCakes118.rar
-
Black-Rock Shooter/Black-Rock Shooter 2012 by ~hoangtush.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Black-Rock Shooter/Desktop.jpg.jpg
-
Black-Rock Shooter/Style.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 436KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 267KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 324KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 268KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Black-Rock Shooter/info !!.txt