Behavioral task
behavioral1
Sample
HongX.exe
Resource
win7-20240903-en
General
-
Target
2bdbc6506ce33f6f95348e3209c7b197_JaffaCakes118
-
Size
86KB
-
MD5
2bdbc6506ce33f6f95348e3209c7b197
-
SHA1
f75cd49bf0d89dc3233f3d3b1859e7b708cca595
-
SHA256
e3257246463c4633a6644caa419d501f4cc630934a29429331118205b999334e
-
SHA512
fb8f7c3a21da707e22e7886ba161be413386ee9124958b0e88399268544ce1b7417578579bb8bdae1da0bdda0fd884210c056c49636396034a265d82db133477
-
SSDEEP
1536:i2jHUBvNmJnCW1yRiapA6jT2HXEMzo1hMhkG68pWeqLhxG1ks5t1AZG8FmmYqR9N:zj0BvNSrap/jTuqGhkGvp5ehU1qtm6P
Malware Config
Signatures
-
resource yara_rule static1/unpack001/HongX.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/HongX.exe unpack002/out.upx
Files
-
2bdbc6506ce33f6f95348e3209c7b197_JaffaCakes118.zip
-
HongX.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ