Behavioral task
behavioral1
Sample
FrontLine.exe
Resource
win7-20240708-en
General
-
Target
2c2fdb2d574a0ede156560d222b14e04_JaffaCakes118
-
Size
2.1MB
-
MD5
2c2fdb2d574a0ede156560d222b14e04
-
SHA1
d776f5d91e9a2e40ba5c3cdbc1b1dd98ebdd2d96
-
SHA256
b0013ff8384c0bdc608c38e6c610f09ad386fa627137f77cad6105f3be127dbd
-
SHA512
30591b6fd18e6adae6ae7f4db4213624382ea354f56129f7c8ab363c2ce357099913a8dc0ec4fca7133de9a3dd12de899e5defb641ae14471b5013bf38519480
-
SSDEEP
49152:knUyKRoemWmFVXWasGxLe67K53PQfgu5kijnFRO3B:khCbmRXdxo53MgckijnFc3B
Malware Config
Signatures
-
resource yara_rule static1/unpack001/FrontLine.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/FrontLine.exe unpack002/out.upx
Files
-
2c2fdb2d574a0ede156560d222b14e04_JaffaCakes118.zip
-
DATA/ABC.BMP
-
DATA/BACK.BMP
-
DATA/Beep5.wav
-
DATA/Bom1.wav
-
DATA/Bom2.wav
-
DATA/Bom3.wav
-
DATA/Bom4.wav
-
DATA/Bom5.wav
-
DATA/Bom6.wav
-
DATA/Bom7.wav
-
DATA/Bom8.wav
-
DATA/CHAR.BMP
-
DATA/Case2.wav
-
DATA/CaseS3.wav
-
DATA/Click.wav
-
DATA/Danger.wav
-
DATA/Empty.wav
-
DATA/GreTh.wav
-
DATA/Grenade.wav
-
DATA/Gun1.wav
-
DATA/Gun10.wav
-
DATA/Gun11.wav
-
DATA/Gun2.wav
-
DATA/Gun3.wav
-
DATA/Gun4.wav
-
DATA/Gun5.wav
-
DATA/Gun6.wav
-
DATA/Gun7.wav
-
DATA/Gun8.wav
-
DATA/Gun9.wav
-
DATA/GunH.wav
-
DATA/GunM2.wav
-
DATA/GunN.wav
-
DATA/GunS2.wav
-
DATA/Heri.wav
-
DATA/Hit4.wav
-
DATA/Hit5.wav
-
DATA/Rain.wav
-
DATA/Rec3.wav
-
DATA/ReloadE.wav
-
DATA/ReloadS.wav
-
DATA/Shield2.wav
-
DATA/Str.bmp
-
DATA/Supply6.wav
-
DATA/TAM-G01.MID
-
DATA/TBack.bmp
-
DATA/TBack.jpg.jpg
-
DATA/TLogo.bmp
-
FrontLine.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
IMAGE/Fire.gif.gif
-
IMAGE/Gre.gif.gif
-
IMAGE/GunH.gif.gif
-
IMAGE/GunM.gif.gif
-
IMAGE/GunN.gif.gif
-
IMAGE/GunS.gif.gif
-
IMAGE/Reload.gif.gif
-
IMAGE/Scr.gif.gif
-
IMAGE/Slow.gif.gif
-
IMAGE/Supply.gif.gif
-
IMAGE/Thumbs.db
-
IMAGE/Title.gif.gif
-
Rank.dat
-
ʵ!().txt