Static task
static1
Behavioral task
behavioral1
Sample
UnturnHat.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
UnturnHat.exe
Resource
win10v2004-20240729-en
General
-
Target
0180c4cf3fd2df2e7a909376a06aec2a_JaffaCakes118
-
Size
435KB
-
MD5
0180c4cf3fd2df2e7a909376a06aec2a
-
SHA1
7d9421ab89d224cbf49f05c96dd6037a1e47e7c5
-
SHA256
9babba1a841439094a5e3017e26055774781deb8d8d0865c6aee4058e53447d0
-
SHA512
b1c4216597709ad157e4d70f711f32d1e8f75868fe1caa8e4f5b17d244efa0df56cf2c3be549691754e4b2ed271333f3964b2479d94d07387065320b417c5ab0
-
SSDEEP
12288:ebIcpWkNYNWkhdBMI1pnosMBDAjNniyggDrgYKjJ6v:7cpm4+dCIDyDAhiBYKjJW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/UnturnHat.exe
Files
-
0180c4cf3fd2df2e7a909376a06aec2a_JaffaCakes118.rar
-
UnturnHat/UnturnHat.rar.rar
-
UnturnHat.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 458KB - Virtual size: 458KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ