Static task
static1
Behavioral task
behavioral1
Sample
2.1.1REZ쳣V3.0.exe
Resource
win7-20240903-en
General
-
Target
15831c67a523b629d2d6e0734a2308b3_JaffaCakes118
-
Size
1.3MB
-
MD5
15831c67a523b629d2d6e0734a2308b3
-
SHA1
60fe62209b13b098bde2685d05e154f9a5a7e7c6
-
SHA256
09ee312670c806252ed7d1405463a68dfe6ba329361b34af5de78917f33ee48d
-
SHA512
65d8aedb38dd0742d051f5882e9af883f1f3a1463921153e968cb6cfb721fcb52792950dc870f66e9c51c9a080b48ee787e6cbe315eb321d4304678d0030dcb0
-
SSDEEP
24576:ZP1ShnBqNzxcrhFcbKmU9/NFhtN42uQC7X7+L+ht7MkllkiU:ZtShInczcJUtNftsQC7X6L+/laH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2.1.1REZ쳣V3.0.exe
Files
-
15831c67a523b629d2d6e0734a2308b3_JaffaCakes118.zip
-
2.1.1REZ쳣V3.0.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 520KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mkoogqwo Size: 812KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wzynbwsr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE