Static task
static1
Behavioral task
behavioral1
Sample
MurderedSoulSuspect+6Tr-LNG_v1.0.0/MurderedSoulSuspect+6Tr-LNG_v1.0.0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
MurderedSoulSuspect+6Tr-LNG_v1.0.0/MurderedSoulSuspect+6Tr-LNG_v1.0.0.exe
Resource
win10v2004-20240508-en
General
-
Target
3aaa8610f2d4bfff0a72e7b1298fd63d_JaffaCakes118
-
Size
1.4MB
-
MD5
3aaa8610f2d4bfff0a72e7b1298fd63d
-
SHA1
bb247966310aa692fd04f3d31a7c52e815794242
-
SHA256
de5c4049138b449632d71d7c4c98f48dbe45a7303e1a14d1619f38c73a4f1791
-
SHA512
c182d9684b08d74d417807638abfd2be1eb70ae562e852ec151a50b26730b426cb516123a9478f4f63546658cd612538cffca5bc9b6e7e4b6d049d1a51722ebb
-
SSDEEP
24576:KqYzr4LuENBL+Ndvh60b81+rDCj+ZITF/hqF/r2GgaUfWZbp/qJ9684ObMj8t3w:jYzrkxNBLgh6GrDJ+hqF/QWfDNO+n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MurderedSoulSuspect+6Tr-LNG_v1.0.0/MurderedSoulSuspect+6Tr-LNG_v1.0.0.exe
Files
-
3aaa8610f2d4bfff0a72e7b1298fd63d_JaffaCakes118.rar
-
MurderedSoulSuspect+6Tr-LNG_v1.0.0/MurderedSoulSuspect+6Tr-LNG_v1.0.0 - INFO.txt
-
MurderedSoulSuspect+6Tr-LNG_v1.0.0/MurderedSoulSuspect+6Tr-LNG_v1.0.0.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
MurderedSoulSuspect+6Tr-LNG_v1.0.0/VERY IMPORTANT!.txt