Static task
static1
Behavioral task
behavioral1
Sample
BunkerMoney_v6.0.3_mpgh.net/BunkerMoney.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
BunkerMoney_v6.0.3_mpgh.net/BunkerMoney.exe
Resource
win10v2004-20240508-en
General
-
Target
90494d94a9a6f9ef7baf683002be23b4_JaffaCakes118
-
Size
12KB
-
MD5
90494d94a9a6f9ef7baf683002be23b4
-
SHA1
052d3a113ab54c2f3366ba0114b2d5338b67b640
-
SHA256
7e5886cac93c33675fc8141be401af6b5de553dedd9b3dc0be5ca225864afc29
-
SHA512
caf40d29cc7f8a893c0758187c876910946242964aaefe8504e0e9ef865d21693dacedc208dc765d905232d0707a4e7f6625236fdf34b5c94a5cdc69aca153b9
-
SSDEEP
192:khIgLu8kOgW/Ct4VnzR/LsVixe7fqJqD19CJzspmnyBWejQFkxt/ROTnYAIfdhpN:VHpwJziAsfsI1qexJRSafdhpEbsNeWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BunkerMoney_v6.0.3_mpgh.net/BunkerMoney.exe
Files
-
90494d94a9a6f9ef7baf683002be23b4_JaffaCakes118.rar
-
BunkerMoney_v6.0.3_mpgh.net/BunkerMoney.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
BunkerMoney_v6.0.3_mpgh.net/ReadMe.txt