Static task
static1
Behavioral task
behavioral1
Sample
UnrealSFV3.exe
Resource
win7-20240221-en
General
-
Target
30775c3e570b786260a4308d3c69c62b_JaffaCakes118
-
Size
516KB
-
MD5
30775c3e570b786260a4308d3c69c62b
-
SHA1
15a8b24ccf9e5d126e12c54a2848ec7c9490dfcd
-
SHA256
7d4ddfd5664fa50c3a62c6a36c0f613d8f4994b67a096d043eb15a379eef0f7a
-
SHA512
462e9b430d6d15945fe9e87552a600ea7296e8e70236c5fcf9d2b992f10abeb85ad936f76fe6ae6c25586721bdd2f5e9b77a836496caee0a67c2960cb3fd81e4
-
SSDEEP
12288:YYJyDh6VRT9PArdLiwVCY6T/6v5h10WgYaGKNbc8izix+jr78+x6H:lIUVRqrdLieCPTCh10LNi2MjX8+xQ
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule static1/unpack001/UnrealSFV3.exe Nirsoft -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/UnrealSFV3.exe
Files
-
30775c3e570b786260a4308d3c69c62b_JaffaCakes118.rar
-
UnrealSFV3.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 877KB - Virtual size: 876KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ