Behavioral task
behavioral1
Sample
+9 clientside hack.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
+9 clientside hack.exe
Resource
win10v2004-20240709-en
General
-
Target
37fae70b46f31b27651c483b4a7c1f3f_JaffaCakes118
-
Size
1021KB
-
MD5
37fae70b46f31b27651c483b4a7c1f3f
-
SHA1
bdc28580fe4211727931aaca0af93896092c771b
-
SHA256
cf87c2772fa2dd1dfed848a3db5cafc9f57f448d6e398c121c61f39da8b5dc97
-
SHA512
b8eec2153d497608879e3eb929f6cb28711602e51da50a3c9e9526f77f10f716eeec1c7beab1e5fbb89589c05afb6a07e6f800742f645ba5a779f1a77a001601
-
SSDEEP
24576:9VSaonVWGvnySg3w9fCtFWzVUC5HypBc+pG58LOiLEgn:9VNonkGlmeCtFWz6C54B7G5oOkF
Malware Config
Signatures
-
resource yara_rule static1/unpack002/+9 clientside hack.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/+9 clientside hack.exe
Files
-
37fae70b46f31b27651c483b4a7c1f3f_JaffaCakes118.rar
-
metin2 yang hack/+9 clientside hack/+9 clientside hack.rar.rar
-
+9 clientside hack.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 644KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 393KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
weitere Werte.txt