351593bde209a26cd91320c4e3ece0fd_JaffaCakes118
- SHA256 8b435292b99dcf63420fdef837b67b4317f2670d1b1a8c066c6f1e7e71f42f1a
Behavioral task
behavioral1
Sample
fix.exe
Resource
win7-20240704-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
fix.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
gwz3-11.exe
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
gwz3-11.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target 351593bde209a26cd91320c4e3ece0fd_JaffaCakes118
- Size 55KB
- Sample240710-rnkfvaveme
- SHA256 8b435292b99dcf63420fdef837b67b4317f2670d1b1a8c066c6f1e7e71f42f1a
- MD5 351593bde209a26cd91320c4e3ece0fd
- SHA1 f7d35d42db03f607cf3b2f59f9af5db798f0e8fd
- SHA512 0f61b896326a3ce4b7c8591616f8ec12fdf0883dfad0d763b11898f2051e9f40368442ae2d9fb7f7865bde0adbec3077381063980bb5d3f80a98fa4ba2bff647
- SSDEEP 1536:GoKLPjaKBufNJRswxXe+KRDdKGdwosVk314FfhYFnB:G1LPj9ulnsa3GKGrsyl4JmFB
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack002/fix.exe aspack_v212_v242 static1/unpack003/gwz3-11.exe aspack_v212_v242 - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/fix.exe unpack003/gwz3-11.exe
File Explorer
-
351593bde209a26cd91320c4e3ece0fd_JaffaCakes118.rar 55KB
-
Onimusha3_edit_06_01_12/readme.txt513B
-
Onimusha3_edit_06_01_12/snap1.jpg.jpg 55KB
-
Onimusha3_edit_06_01_12/修复补丁.rar.rar 6KB
-
fix.exe.exe 11KB
-
Onimusha3_edit_06_01_12/修改器.rar.rar 11KB
-
gwz3-11.exe.exe 16KB
Onimusha3_edit_06_01_12/readme.txt
- SHA256 a15589e6d28f80c9c1e39b6eb237db2f58e5c1b7cfa27763d6158550605e19f9
- MD5 36df4e923d50465a6b0211e367780df7
- SHA1 20e6f28f861c4de627f89104f54212930cdec5e4
- SHA512 ce5d709c977d2dcdefde9599abff80e76e7ef936ae4583a4e5c317a6f2e5e46eab79fac452248bddcc99e5abb6954bd574ed29c560ed5aa7108fd961c0857fe3
- MD5 SHA1 SHA512
Onimusha3_edit_06_01_12/snap1.jpg
- SHA256 0cbbe29e20ec35ed0c44621f69712bb73c07b7fd2fec418ea53193f2ae21a65e
- MD5 2ac62d9709dd5aa40739e985ea5e52ec
- SHA1 fd0ae53c1d6edcc9d877ad55edc477dae4832d54
- SHA512 2267edd7c99c380a7354f859e296f98e34553f136680020ed70ed3cb16bd445a57473c8c41f3fbe76330ce3bf30fa8999d73f2a3ebbe58eea9f68cf0315bc77e
- SSDEEP 768:jkZoTc88JyfomzOS3gyCOkw2Lgxe2yNi9/u4ctthinuzxu2gD:jkZowW7/3YbLb2+u/4ttAeI
- MD5 SHA1 SHA512 SSDEEP
Onimusha3_edit_06_01_12/修复补丁.rar
- SHA256 a76e7939ed48c8f0f7582bba53a2cb943a8e96e64396ad69007cfccc1463e4b6
- MD5 c71e7915ff3414196f24fc2543bc4899
- SHA1 93795e05c17edd7223b908b99b9b1edd10682d8a
- SHA512 df21225be1278fca9b93ae4fab3dd99f985094e6179998af4ba74d906b3967f16f7451a79ca7828b2569f55d81b4961000e7a2878916621d33d2b3aa42e2fff0
- SSDEEP 192:80z6eP+I5oZnDwzypsjNp/PfQ0aYMepXX2KPkf5j:80meP+dDwuqkspXX+5j
- MD5 SHA1 SHA512 SSDEEP
fix.exe
- SHA256 4806ec901dac3a546fb02d60b59c973fa611163d4d3c1a50db5e5227ac427d25
- MD5 1193bafec36984e911751d647f55b4c3
- SHA1 e9b49a97a93a4ae6f1aa89adfd5667b57660b7d2
- SHA512 1dd977e1b810478e3b95fa878ee0402077c96ca9cf004ef7e06104ae2c62204c11717333c87b14fb84814712a5672f8add9c6f9160e34f340f9f960e6dffc340
- SSDEEP 192:LgBra4MpdxJ00f19lMfP/nPpAxPwCMrpY7e8LqPZo5LdCfq1Rn6O3szi:LtpfxJnf19lMfP/BAxPr6+e9Pfqbn1Mi
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20481
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=2, id=9, version=8783,
count=1, id=13, version=9782,
Onimusha3_edit_06_01_12/修改器.rar
- SHA256 e0b27179d2960f82322f5d29ac7202e5f4d9d6fd6dd4121966bd652cb94893c3
- MD5 deb7471b0342b023deed85b2dddec6e2
- SHA1 13a0ebeaa8f8226215342671d09e1b32ba4d7156
- SHA512 f385cf86145409ab75307d07204ceb673226e7bc75308defd5aeccc96b7e8beb89865672c8e811b0183d901fa18430e85797b852fdd0b7bbf5888636bfdfcb60
- SSDEEP 192:Vs3EMLczdQGA1/Wo+79MPKjqRHaGdEFcJuKJbA0U3oLWSXG+P:Vs3EMLczFA1/W1MUqR6GdEFpKJVWSXGQ
- MD5 SHA1 SHA512 SSDEEP
gwz3-11.exe
- SHA256 23027c3adebf2f1b037138dc858e601bbac5822bbf3ecdbc32a139806c6b783c
- MD5 da8f037081129f8a7f8fb9669db40473
- SHA1 bbb5ef3df76851d47889dbd38d1a7e58586224b8
- SHA512 084071c50dfd3357e3f07b433dd7f92b2e19d764fe42d664fb03d2c527d4eb300edf54362220563ce7f09fc9e93eef3c3d773db933de8ae9d35d554042079e55
- SSDEEP 384:zFVaThvt9/fcm2RKJX9FNkXn3fAxfr6+e9Pfqbn1u5:zF4Thv3SyX9FNkXn3YxOha5u
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
49153
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
8KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=2, id=9, version=8783,
count=1, id=13, version=9782,