Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
uujpq.exe
Resource
win7-20240708-en
General
-
Target
d2729ca9933742958ff92c72f1d50c24_JaffaCakes118
-
Size
133KB
-
MD5
d2729ca9933742958ff92c72f1d50c24
-
SHA1
9f1233cf2defbaa6373dd6dfb44a1b856de6d7ea
-
SHA256
596e86d55146757c303a44fefee07bb39857ad733512f414b97e00eec6aede72
-
SHA512
b06138c33f81b952cb1eb46ed8b54b1bb9962bfbf92491434ead0f7993875e999c58789a13e7c6e825903a75376cef5bc1583e355ed272a69496f6808b753111
-
SSDEEP
3072:lXSjCQMgJ5AOksHz2bZR0GediIWdKXrnW2q6YTooI:UjCry0sVfdiwnW2XYs
Malware Config
Signatures
-
resource yara_rule static1/unpack001/uujpq.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/uujpq.exe
Files
-
d2729ca9933742958ff92c72f1d50c24_JaffaCakes118.rar
-
155绿色软件站.url.url
-
uujpq.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE