Static task
static1
Behavioral task
behavioral1
Sample
ReUnion.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ReUnion.exe
Resource
win10v2004-20241007-en
General
-
Target
2b18d17dc70a12870a5794b27c29aeaf_JaffaCakes118
-
Size
325KB
-
MD5
2b18d17dc70a12870a5794b27c29aeaf
-
SHA1
f296c522991e2489a68925990add21be520a5c16
-
SHA256
f592669d53a721efe7fd9345bcf6d7d428960288142a13e656162d17f8b9239d
-
SHA512
b579c7ba108483f285ecff04588e8a21e3367aba4e7238e5e0c14c7c71b4c8a1cdf41f1ba5169e49a5f8ae7a57868c0c4518dc73f56a5786707beff101ca9e2c
-
SSDEEP
6144:PuTZJhr0oQ53Ff6zCeUb/kPOQDreveGO3XuH9Bbt7PePh9UGp/U9EqH70q:ubSocACV3Qv0eGOslGZp2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ReUnion.exe
Files
-
2b18d17dc70a12870a5794b27c29aeaf_JaffaCakes118.zip
-
ReUnion.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ReUnion Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ReUnion Size: 319KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ReUnion Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
readme.txt