Behavioral task
behavioral1
Sample
caf49a811e4195961bf725e9da3249fa_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
caf49a811e4195961bf725e9da3249fa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
caf49a811e4195961bf725e9da3249fa_JaffaCakes118
-
Size
24KB
-
MD5
caf49a811e4195961bf725e9da3249fa
-
SHA1
f11b2b8d9d11b083468cf445ed1aff154cdd8de5
-
SHA256
ff8c7ac8e68733de6e226beb30886039f388ba28c638d795a5a7ff427e80fbb5
-
SHA512
e7682c2c3350db17865e3ec002fcfcd8e0bd8fd8f1128d298a05ffe0e847d07ec352d8d92d9a1fa476ab5c1fe90e5a0315503b82b072baf5b861495bf3952426
-
SSDEEP
192:Rl5+8Pa9S8kjYTDGgbcp4Llp2SAfF9aEOnryD91ABkGxVXTIqoNGRJ0:Rl5P/jYTDGggpM23fJWyDbAnx/oNV
Malware Config
Extracted
revengerat
NyanCatRevenge
68.183.135.238:333
6f2924775918
Signatures
-
Revengerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource caf49a811e4195961bf725e9da3249fa_JaffaCakes118
Files
-
caf49a811e4195961bf725e9da3249fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ