Behavioral task
behavioral1
Sample
HacKed.facebooekexe.scr
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
HacKed.facebooekexe.scr
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
HacKed.facebookexe.scr
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
HacKed.facebookexe.scr
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6eb0ebabb97c1d2dd501f5ea361748e0
-
Size
282KB
-
MD5
6eb0ebabb97c1d2dd501f5ea361748e0
-
SHA1
c2cd36b288489c6af71f64602a9e6d1369bd137f
-
SHA256
1258766390555235997b028942158f1177413246e3f8e7cf95eba1b47cb0ccbd
-
SHA512
6f5b2031ad4020582104ba64cc53f7b7d0a454f122dc6ad6ff7c37fa986b078c0970ddc0502c4f6dbfd2cb537bec837c80c7b7f851b49948641a2401edcfae99
-
SSDEEP
6144:PH7IxlrfBL4MFVu6rxdrQv+A282Xqji0U6BTXCjBn2u8oCgG4c1POhtWg9:PbIxlrzFZxdr7/8il0U6BT6h2uBePCtf
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/HacKed.facebooekexe.Scr unpack001/HacKed.facebookexe.Scr
Files
-
JaffaCakes118_6eb0ebabb97c1d2dd501f5ea361748e0.rar
-
HacKed.facebooekexe.Scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
HacKed.facebookexe.Scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ