D:\Project\CHIDAT\ChiperIO_Key\ChiperIO Key\obj\x64\Debug\TP.pdb
Behavioral task
behavioral1
Sample
fae5840849f34c2ec20fe9b4ae0fecfd_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
fae5840849f34c2ec20fe9b4ae0fecfd_JaffaCakes118
-
Size
26.0MB
-
MD5
fae5840849f34c2ec20fe9b4ae0fecfd
-
SHA1
0ed18a4ae781e21f5fa9b1359169d2b563050243
-
SHA256
84278323aed21f00e2f6f5381ca77dc8107f0ece86deee482264269e8bbac027
-
SHA512
9fdb55216a2aaa7c521bf4c5fb63701825c95412c645c18bfded04cc80a97661d9dd4a8a30e624f4745485be6ea2e1d38c171fddbfb652ba9a422d9affca9f40
-
SSDEEP
196608:2f6Ww+PE8gOXOD5uI6OKAVH11ONl+C85HHXz5izNt2P2oY4e:aHtc8gOeNTW826H3s3Me
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
resource yara_rule sample family_zgrat_v1 -
Zgrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fae5840849f34c2ec20fe9b4ae0fecfd_JaffaCakes118
Files
-
fae5840849f34c2ec20fe9b4ae0fecfd_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 25.8MB - Virtual size: 25.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 215KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ