Behavioral task
behavioral1
Sample
UnJBookMakerCNGR/UnJBookMaker.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
UnJBookMakerCNGR/UnJBookMaker.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
更多实用小工具.url
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
更多实用小工具.url
Resource
win10v2004-20240802-en
General
-
Target
83d86d6869836fff5f5d329a2f1ab547_JaffaCakes118
-
Size
188KB
-
MD5
83d86d6869836fff5f5d329a2f1ab547
-
SHA1
a4c832096550961858ae618eeac6af474246b092
-
SHA256
351bacff1b36258f0a4d1951b297b14782158fb71fb6de896f520a2b473343ce
-
SHA512
b8c6aea4ef5b8ca1300c34420773f70cb127e9b487c60b5a9ccf0baa7f18ca368e222f0d05764c4ab88599e5beeb13e0ed1a9bbf527aef85a3b7a286f2bf8875
-
SSDEEP
3072:EIiCGBQXJtoqLpSRFaWuSigCyTv32HvjILrKLNtoPYwP7kL/5+yrnk2wu/Ec3rz+:psctoqslDC9HvjFLNkLP7W+XiN3XZM7r
Malware Config
Signatures
-
resource yara_rule static1/unpack001/UnJBookMakerCNGR/UnJBookMaker.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/UnJBookMakerCNGR/UnJBookMaker.exe
Files
-
83d86d6869836fff5f5d329a2f1ab547_JaffaCakes118.rar
-
UnJBookMakerCNGR/UnJBookMaker.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 164KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TLS Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
logo.gif.gif
-
更多实用小工具.url.url
-
说明.txt