Behavioral task
behavioral1
Sample
Cheat LG.exe
Resource
win7-20240903-en
General
-
Target
cf68c5aa47cdaf5b6fe94feafa36d52c_JaffaCakes118
-
Size
34KB
-
MD5
cf68c5aa47cdaf5b6fe94feafa36d52c
-
SHA1
b06140fdfea3d37c6a9f35a4e986b092805e73c3
-
SHA256
830958116e50bb5016da99aacf93417b3c2ecca7d580ad998bcd579e7e62c597
-
SHA512
ae06e8f6af890adef2db0fa1ae90defc6b1a1165b6bf62a0ff63e20361c8082a6f358e5b0fa9b528fef4722d50aa8149c5164a981ae8b3b66a6ba1eee12ae81c
-
SSDEEP
768:Q4dviP+s6hiNnq9gZtju9x0cJea+7mctndkb74hL6mggzJKId:RdviGs6hiFoxlJeaInK7Gzgahd
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Cheat LG.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Cheat LG.exe
Files
-
cf68c5aa47cdaf5b6fe94feafa36d52c_JaffaCakes118.rar
-
Cheat LG.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 39KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE