Behavioral task
behavioral1
Sample
bcdc123a636493f3fba1b5391b2c6e9b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bcdc123a636493f3fba1b5391b2c6e9b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcdc123a636493f3fba1b5391b2c6e9b_JaffaCakes118
-
Size
487KB
-
MD5
bcdc123a636493f3fba1b5391b2c6e9b
-
SHA1
d146a54eb4597e9cbb6a0dddc0c2717fea18244e
-
SHA256
3449bf3a4a172a755e60ca31b4790dc5a86c4d375c3601a4d3c88833c6c4f112
-
SHA512
16e9ddf0b00964895aa90043b067b79ed6d196b6e6de1d7bf63accc9aed1e9963c34a9cfe17ad9ff5630823ba9d95d6cf083c56f5a0dee3931fc2cc8ad70671d
-
SSDEEP
12288:vfPEccw1ao4H5WuIcsPVhKa+BsyeV4pmAItpCx:vfJ8X5dsPVhsfeV4IHI
Malware Config
Signatures
-
RevengeRat Executable 1 IoCs
resource yara_rule sample revengerat -
Revengerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcdc123a636493f3fba1b5391b2c6e9b_JaffaCakes118
Files
-
bcdc123a636493f3fba1b5391b2c6e9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 428KB - Virtual size: 427KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ