Static task
static1
Behavioral task
behavioral1
Sample
asx-pop3.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
asx-pop3.exe
Resource
win10v2004-20240709-en
General
-
Target
633fde559e8f222eeecee347e52ae8f6_JaffaCakes118
-
Size
29KB
-
MD5
633fde559e8f222eeecee347e52ae8f6
-
SHA1
8d7912e3ee819ae7e538442feed55e9a7942022d
-
SHA256
5b92052d11a42d4667fe470dcf2eac2059ba5b7dc4a59d11f5363e99ac42930b
-
SHA512
606f2d96f2375cd7aec6336711ed652a991650de186af0aa34fa8d3db2e391ee1e0dcace9f1615904445a819216b609ef2052d199750f85de00fe0768d093563
-
SSDEEP
768:wtyvOuA6x/hZOstsKW19puoHzMtiu6rJ49:wQLA6lhZP694oHzMd+J49
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/asx-pop3.exe
Files
-
633fde559e8f222eeecee347e52ae8f6_JaffaCakes118.rar
-
asx-pop3.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 132KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
-
asx-pop3.nfo