Static task
static1
Behavioral task
behavioral1
Sample
Ailipêche 2.0/Ailipeche [13,6].exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Ailipêche 2.0/Ailipeche [13,6].exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Ailipêche 2.0/Ailipeche [13,7].exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Ailipêche 2.0/Ailipeche [13,7].exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
Ailipêche 2.0/Ailipeche [13,8].exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Ailipêche 2.0/Ailipeche [13,8].exe
Resource
win10v2004-20240412-en
General
-
Target
fc583260647696c88a08acb45f7d7231_JaffaCakes118
-
Size
44KB
-
MD5
fc583260647696c88a08acb45f7d7231
-
SHA1
84c347f4a51ca442f0cece4c51ecd47d95a9e068
-
SHA256
26c306c0e7d4ab36dfb3daefd322f201c3afbf8a4c436722ff03a81c10207981
-
SHA512
a852fe7a99c4e49352353a51c4f856d5235642adccb35727ea3a1a2bac2b73d57afe9942fba2bc54176ba2ebe27fc3a8995eb261d20e3766f214cd6434665b8b
-
SSDEEP
768:qONOKVSAHaUlyulnX//vrv78MG0fb5EY1THlDWAq7r9K9a4Zv4imJ0FwTdiT:loQlXlPLv78KbCcbl5U4t4hKaTdiT
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Ailipêche 2.0/Ailipeche [13,6].exe unpack001/Ailipêche 2.0/Ailipeche [13,7].exe unpack001/Ailipêche 2.0/Ailipeche [13,8].exe
Files
-
fc583260647696c88a08acb45f7d7231_JaffaCakes118.rar
-
Ailipêche 2.0/Ailipeche [13,6].exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Ailipêche 2.0/Ailipeche [13,7].exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Ailipêche 2.0/Ailipeche [13,8].exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ