Static task
static1
Behavioral task
behavioral1
Sample
Aigo_Software_All_Products_MultiPatcher_AT4RE/Aigo_Software_Inc_Products_MultiPatcher_AT4RE.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Aigo_Software_All_Products_MultiPatcher_AT4RE/Aigo_Software_Inc_Products_MultiPatcher_AT4RE.exe
Resource
win10v2004-20240419-en
General
-
Target
14c085cc45f26987a242deef582e3d64_JaffaCakes118
-
Size
282KB
-
MD5
14c085cc45f26987a242deef582e3d64
-
SHA1
bc830c163312d4ddbb32a02661674570eef83b84
-
SHA256
4ea10837c956544f6c05b826d1791a6f8f78be6f07e9139332126e394447b470
-
SHA512
847d14035f7c2e37aedd7e98deee3835787c709fd1ab2552812c1b340fa16ef626431ca99d786139115e7b3afa103dff343381947bd36c0651a3f071e3d38849
-
SSDEEP
6144:FQmboiqpR0RcX9ZJ3q1W+GC85/d/87AJQGPXEmuQTJ3Owk8xdli:avJpRZZI1W+GC85l87SQG809aIji
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Aigo_Software_All_Products_MultiPatcher_AT4RE/Aigo_Software_Inc_Products_MultiPatcher_AT4RE.exe
Files
-
14c085cc45f26987a242deef582e3d64_JaffaCakes118.zip
-
Aigo_Software_All_Products_MultiPatcher_AT4RE/AT4RE.nfo
-
Aigo_Software_All_Products_MultiPatcher_AT4RE/Aigo_Software_Inc_Products_MultiPatcher_AT4RE.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 284KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
keygen.nfo