Behavioral task
behavioral1
Sample
进进窗口化(真正去除鼠标限制).exe
Resource
win7-20240705-en
General
-
Target
b2fd4ea23ff89fb99857aa1ca9713d91_JaffaCakes118
-
Size
817KB
-
MD5
b2fd4ea23ff89fb99857aa1ca9713d91
-
SHA1
ce912cd19aaab69d9a11f0c7f8a299085558a34a
-
SHA256
3758653bba3e5a28f980774ab4ec7b8d5faff165deba31e711bafced6f9ff34a
-
SHA512
0175c15096c67edefef429068f11f9a04a0e99a94ba9d6fde3c0628e70cead64712680b362ff0008a812121190d7d36139c0e8368617e4c914f331d632c66178
-
SSDEEP
24576:29EI5IF0AH5eIIMl36Nkmxe7QCfLuRnJ3fBfv:27iFZHhfBOsCRnJvN
Malware Config
Signatures
-
resource yara_rule static1/unpack001/进进窗口化(真正去除鼠标限制).exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/进进窗口化(真正去除鼠标限制).exe
Files
-
b2fd4ea23ff89fb99857aa1ca9713d91_JaffaCakes118.rar
-
进进窗口化(真正去除鼠标限制).exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 592KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 812KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE