Static task
static1
Behavioral task
behavioral1
Sample
asx_ac_dx9.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
asx_ac_dx9.exe
Resource
win10v2004-20240508-en
General
-
Target
a7b147a3c7e0becaf647440ebfe2b903_JaffaCakes118
-
Size
28KB
-
MD5
a7b147a3c7e0becaf647440ebfe2b903
-
SHA1
22140f76816de20ab81d4c522839ae794b336a32
-
SHA256
405ee693178923013e15a3dbfa9a7d270319d7a8ab7809f51c2a47c4cacc93e7
-
SHA512
84254a3c9487aed8b68170e75aa6688ea89f31c17e244d4e15b4a303f27e7e8c832a51cde3906b6917eb6ecaa06d3285c230d828a9b1731363880bddf50537db
-
SSDEEP
768:PAhQFpbeDU3x3JT0qimERStFwNZYplvZ5iTp1QbUGiI5SE:Pt7RFJT0qimE4wEplvjuUigSE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/asx_ac_dx9.exe
Files
-
a7b147a3c7e0becaf647440ebfe2b903_JaffaCakes118.zip
-
asx_ac_dx9.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.asx-0 Size: 218B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asx-1 Size: 26KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
asx_ac_dx9.nfo