Behavioral task
behavioral1
Sample
0_Day_Trainer_Savegames_Patches.de.url
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0_Day_Trainer_Savegames_Patches.de.url
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
mafia2_v1.0[1]_trn+9.exe
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
mafia2_v1.0[1]_trn+9.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
mafia2_v1.0_trn+9.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
mafia2_v1.0_trn+9.exe
Resource
win10v2004-20240709-en
General
-
Target
71b435e6f32f7b3c8011765ce266b90e_JaffaCakes118
-
Size
256KB
-
MD5
71b435e6f32f7b3c8011765ce266b90e
-
SHA1
874e1149745ff8f9bd6cba688bbd7141e67daabe
-
SHA256
d07b155f52514bc92d89f18a72e45a5190b6f9e0f116529fab2661048820ebd4
-
SHA512
b0f4cb9f452c7f8c4ad2e142440ac72319ecbc149e950effb76c678b1b44460003c77c0dc7d7c7c962f268aa459ef73e84bcdb0ddbfb2c0767a3154437d21caa
-
SSDEEP
6144:qpGY7+W2bkrJuJUm6rUZ3e9+WcbkrJuJie3Yu:q8Y738kr8B6/3akr8X3h
Malware Config
Signatures
-
resource yara_rule static1/unpack001/mafia2_v1.0[1]_trn+9.exe aspack_v212_v242 static1/unpack001/mafia2_v1.0_trn+9.exe aspack_v212_v242 -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/mafia2_v1.0[1]_trn+9.exe unpack001/mafia2_v1.0_trn+9.exe
Files
-
71b435e6f32f7b3c8011765ce266b90e_JaffaCakes118.zip
-
0_Day_Trainer_Savegames_Patches.de.url
-
code5.nfo
-
dRoLLe.nfo
-
mafia2_v1.0[1]_trn+9.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
mafia2_v1.0_trn+9.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
virusscan.txt