Static task
static1
Behavioral task
behavioral1
Sample
flatout_trn.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
flatout_trn.exe
Resource
win10v2004-20240412-en
General
-
Target
fc1f6f0cbebde9f5f82f65e8d356c42e_JaffaCakes118
-
Size
70KB
-
MD5
fc1f6f0cbebde9f5f82f65e8d356c42e
-
SHA1
183183762b4d7d083f11c20b98ac2ee5cd4743b9
-
SHA256
4d679f69798a06f99159cb1ee52885db2f57bb42e55590008a11217c34839811
-
SHA512
761a511a17e00dc179e2bc63aa3773662220f15ecb932d8409ae7ec81927b67c5efcff634593aca47b092df5b970c09034d28f2e52fc1aecec753b65c4b1e1ed
-
SSDEEP
1536:5JvDUM1dwEGl5CbNpNoGN8wU/G+yvNcQTvwPnkD:5N0CbfNoGpgMNnAkD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/flatout_trn.exe
Files
-
fc1f6f0cbebde9f5f82f65e8d356c42e_JaffaCakes118.rar
-
flatout.txt
-
flatout_trn.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 79KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE