Static task
static1
Behavioral task
behavioral1
Sample
RosScriptGenerationV2.0/Ros.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
RosScriptGenerationV2.0/Ros.exe
Resource
win10v2004-20240802-en
General
-
Target
8433cc0e129d7c3d19b8b19ad66a97b2_JaffaCakes118
-
Size
568KB
-
MD5
8433cc0e129d7c3d19b8b19ad66a97b2
-
SHA1
d5e637608ffd83e7c944a7f1a610a3350d6301b0
-
SHA256
5844cd534c43b2e2654ddb580b59e882d039e572b649bb3073a56c8f8824c916
-
SHA512
cc74706e27eb04608028c4cee62ab0be4d9e3f70e17956ce2fd52af36406371c36c51c3f5429423c6d9360f4189d2b8cf1b368c2c6ecb67d06448f13f7ebea48
-
SSDEEP
12288:5wlSG6Oej4NicclmyNF/hiYmt7GNXsg/wvLjPc3I7RR8SIWeC0i7:5wS09slmyTgVsNXsS84gTeC7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RosScriptGenerationV2.0/Ros.exe
Files
-
8433cc0e129d7c3d19b8b19ad66a97b2_JaffaCakes118.rar
-
RosScriptGenerationV2.0/Ros.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
j�%d Size: - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
j�%d Size: 67KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
j�%d Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE