C:\Users\Andre\Documents\Visual Studio 2005\Projects\OCS_Branding_fw\OCS\OCS\obj\Release\OCS.pdb
Behavioral task
behavioral1
Sample
JaffaCakes118_778c3834a17f5a5cecabf2ac83518700.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_778c3834a17f5a5cecabf2ac83518700.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_778c3834a17f5a5cecabf2ac83518700
-
Size
525KB
-
MD5
778c3834a17f5a5cecabf2ac83518700
-
SHA1
f25d2836478ce77d5bac5fd3a71d12175ccce1cc
-
SHA256
f279b8dc49b6b7c1e56efe283edf150ede3c7ffe24777d9709768ed5f4c7f945
-
SHA512
16ba1fc3a425af29bf0fd7622829702d68de80ff2f18d9e91be5c8d9e129e4b21ce3768dfcf939282db6fb7ee772d75aa71fd617972a258f6f092c7010b763f7
-
SSDEEP
6144:JfCEblmXvD2y3USsq01qZGsJK5gxMFfff164AZyTtyqaqgVkENh4HrfiysVufBnv:JfXblT04XqD++vysgfBnnl2C
Malware Config
Signatures
-
RevengeRat Executable 1 IoCs
resource yara_rule sample revengerat -
Revengerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_778c3834a17f5a5cecabf2ac83518700
Files
-
JaffaCakes118_778c3834a17f5a5cecabf2ac83518700.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 308KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 149B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ