Static task
static1
Behavioral task
behavioral1
Sample
Dead Space/Dead Space.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Dead Space/Dead Space.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Dead Space/Dead Space.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Dead Space/Dead Space.exe
Resource
win10v2004-20240426-en
General
-
Target
6c1415597ef6bf0721616a4ef974b216_JaffaCakes118
-
Size
6KB
-
MD5
6c1415597ef6bf0721616a4ef974b216
-
SHA1
6c2dca7ad212ed0acf379caef5cbe5302313dcf2
-
SHA256
0bb68b424b431988c83b9133187cb6d2d1a2bab017fba22f7fbba5f838aeaca8
-
SHA512
7b8e873b0ef29faa7bcc30874f879cbb31da93f0821daaeb5332a638cfbece54e9f506934ddb519e7e6724eb23084017f61c0bdd902fdb8bfcea5a3a35feabb6
-
SSDEEP
192:4as74op/wr5OVvdj6iRo0dynJnusjxYami2:4B4JAVMS4pjSdi2
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Dead Space/Dead Space.dll unpack001/Dead Space/Dead Space.exe
Files
-
6c1415597ef6bf0721616a4ef974b216_JaffaCakes118.zip
-
Dead Space/Dead Space.dll.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
B Size: 5KB - Virtual size:
Size: 16KB - Virtual size: 64KB
-
Dead Space/Dead Space.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
< Size: 4KB - Virtual size:
Size: 12KB - Virtual size: 64KB