Static task
static1
Behavioral task
behavioral1
Sample
брут/NLB.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
брут/NLB.exe
Resource
win10v2004-20240508-en
General
-
Target
8a425504bac9f1e95e8309454c0ccb7b_JaffaCakes118
-
Size
31KB
-
MD5
8a425504bac9f1e95e8309454c0ccb7b
-
SHA1
25aa70a254720b45428a0262cfaa2f1bae9dcfff
-
SHA256
59ca1a6e6f3d7de94a455c3279f8b4588f466a3d78082e19fc029308a7d45d0b
-
SHA512
6be94895239bf2bf3d1d016ee6f53b469f99fe9a31ad0fc39e99d13ec7308214774f953bade99c61e19ce84bc04df3f34853349b9be8de8ed43cdc8e1099e46b
-
SSDEEP
768:rCZMCK0DH8lXi6ilsJzi7EltP4T2r/bV0rw2y:rc3CiKzi7stP4T2r/bV0rwd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/брут/NLB.exe
Files
-
8a425504bac9f1e95e8309454c0ccb7b_JaffaCakes118.zip
-
VKBRUTE-master/README.md
-
VKBRUTE-master/брут.rar.rar
-
брут/NLB.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
брут/QuotaManager
-
брут/au_global_storage
-
брут/data_1
-
брут/dictionaries.xml.xml
-
брут/previews_opt_out.db
-
брут/Новый текстовый документ.txt