Behavioral task
behavioral1
Sample
qbgjx/qb_gjx.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
qbgjx/qb_gjx.exe
Resource
win10v2004-20241007-en
General
-
Target
3e72f003c9c808e636870e1631ed06ba_JaffaCakes118
-
Size
71KB
-
MD5
3e72f003c9c808e636870e1631ed06ba
-
SHA1
80368a1f859079bdbf8753010add54b8a8a86a29
-
SHA256
694857cb5347fb7b1288364c21ac7e6210f40a3f100a399ab845056c8e061629
-
SHA512
085863733a0def5fca641a3e012941b920e361cddeb5aa082a044d3001a56596e3cae5ff23a87dbfb7e3ddef6a3daa5eeb02e6419397bf4f0a347ee0e4aad945
-
SSDEEP
768:awnkzbnN8suo8iKQw3k+Zp+YAlpA8+DrE+y+k0mGzW673DofUe86UB/eKyLYZQGk:aooN81EGDe+m+jmGXgLuSLYnHm
Malware Config
Signatures
-
resource yara_rule static1/unpack001/qbgjx/qb_gjx.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/qbgjx/qb_gjx.exe
Files
-
3e72f003c9c808e636870e1631ed06ba_JaffaCakes118.rar
-
qbgjx/qb_gjx.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
qbgjx/■◆★务必先阅读■◆★.txt