Behavioral task
behavioral1
Sample
卡哇伊透视.exe
Resource
win7-20241010-en
General
-
Target
3f8002810b0a01e821da0dc7033ca489_JaffaCakes118
-
Size
395KB
-
MD5
3f8002810b0a01e821da0dc7033ca489
-
SHA1
02bb914799c2dd5c5f7c4b95a0b3fa66d7c7daef
-
SHA256
654ae31faf13ffa289d1d02808bf1ef3909eb07d3beb2f53272c2708dc91c6fc
-
SHA512
ed49ade85b7dd63d8374c01e1cfd46e377b4be5f047cfb0334c25ae9bfaceb68eb4dca9f8cdaebe8213b8003f51018e004a122b663eb4171599474ce2d84bb20
-
SSDEEP
12288:7mUZWli7XwdF6i9sqpKOqQG8hqDu4Ow8i:SUZWwcdkiamF0C41
Malware Config
Signatures
-
resource yara_rule static1/unpack001/卡哇伊透视.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/卡哇伊透视.exe
Files
-
3f8002810b0a01e821da0dc7033ca489_JaffaCakes118.rar
-
卡哇伊透视.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE