Static task
static1
Behavioral task
behavioral1
Sample
10-Strike Networ.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
10-Strike Networ.exe
Resource
win10v2004-20240226-en
General
-
Target
e9da14eb14f5aafd7309a3d9afc7b67c_JaffaCakes118
-
Size
799KB
-
MD5
e9da14eb14f5aafd7309a3d9afc7b67c
-
SHA1
b933b3498ca3f68de7abf9c1fbc7a3023edeeb03
-
SHA256
26a2ae557edf1bbbe80491e53e210fcc26a5c8d0c06349c5b660cb522b9aa0ed
-
SHA512
5d0af5be84de8e4a4feb1a2c699c96f0ed79edc71c3bab90bf03594c0ea2c26dd1c4f91f0dae394eac2ec9d7db5297979cb8fb826a98eca8d5258b7055dbe66d
-
SSDEEP
12288:j2DFx6gFAu6AIHPwFGxyZ3WTB3veY5MUSDzoLfRyNeIeO:jStAu6HILZ343veYKUS/olyNPd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/10-Strike Networ.exe
Files
-
e9da14eb14f5aafd7309a3d9afc7b67c_JaffaCakes118.zip
-
10-Strike Networ.exe.exe windows:5 windows x86 arch:x86
fa9aba929f437fffc73dd8957d81081e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsAlloc
Sections
Size: 255KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tbhaucbc Size: 540KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iwwltnye Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE