jaffacakes118_MalwareTrainingLvl2Sample1.zip
- SHA256 20946142795ea4b9fafad9a279e5da0e2f491f567380d7f37570d451f3aa6b8f
Password
infected
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
89c6b68a3f89ba654147a93836cb517f2e1a78da2ac27b2a7de637a3748ccc1f.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
89c6b68a3f89ba654147a93836cb517f2e1a78da2ac27b2a7de637a3748ccc1f.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
18 signatures
150 seconds
Behavioral task
behavioral3
Sample
89c6b68a3f89ba654147a93836cb517f2e1a78da2ac27b2a7de637a3748ccc1f-cleaned.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
19 signatures
150 seconds
Behavioral task
behavioral4
Sample
89c6b68a3f89ba654147a93836cb517f2e1a78da2ac27b2a7de637a3748ccc1f-cleaned.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
18 signatures
150 seconds
General
- Target jaffacakes118_MalwareTrainingLvl2Sample1.zip
- Size 164KB
- Sample260916-bb2llavbkd
- SHA256 20946142795ea4b9fafad9a279e5da0e2f491f567380d7f37570d451f3aa6b8f
- MD5 f918d1f28df582953f432fb5e6853af8
- SHA1 52ade95b12f5e99293c4c2186db262369f35d2f9
- SHA512 490ae6ee55872a0d9067836f46b5d5980e1ad04f53ecf7b2b737238d7952841752df5dbe3086e889ad5f51e2bfb243b02342f8499b6be4d91cf9df4d94574b63
- SSDEEP 3072:17nqignp6r9FxtNQIAXDkLCuZKjGXUbJNNeBDqnSWC22rZCSRX8yO:17faDkFBktionT2AU3O
- TLSH T101F312B17C963802D9AAE3F40D1A920F57A23A80F44275DDBF852B558DD60EBF01D7B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- SmartAssembly .NET packer 1 IoCs
Detects SmartAssembly .NET packer.
resource yara_rule static1/unpack001/89c6b68a3f89ba654147a93836cb517f2e1a78da2ac27b2a7de637a3748ccc1f SmartAssembly - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/89c6b68a3f89ba654147a93836cb517f2e1a78da2ac27b2a7de637a3748ccc1f unpack001/89c6b68a3f89ba654147a93836cb517f2e1a78da2ac27b2a7de637a3748ccc1f-cleaned
File Explorer
-
jaffacakes118_MalwareTrainingLvl2Sample1.zip.zip 164KB
-
89c6b68a3f89ba654147a93836cb517f2e1a78da2ac27b2a7de637a3748ccc1f.exe 288KB
-
89c6b68a3f89ba654147a93836cb517f2e1a78da2ac27b2a7de637a3748ccc1f-cleaned.exe 276KB
89c6b68a3f89ba654147a93836cb517f2e1a78da2ac27b2a7de637a3748ccc1f
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 89c6b68a3f89ba654147a93836cb517f2e1a78da2ac27b2a7de637a3748ccc1f
- MD5 a6fb25e513463283b71d0a9bae3c166c
- SHA1 480889cb4eac83a9b9c95feea08a27b6f2767016
- SHA512 b1434a89a96e5a8120751518e057435e65502f9a0517424f4197af4207b14f38cfcd86ec6b032db40f1800c36336b92762f96984899a75774408044b4cf45851
- SSDEEP 3072:EUc8VlLizVc2aAes7GVGNVGWPo/0BSgL+jGBce:EUc8eBh0ioMBS8+q
- TLSH T115542D9C28FAE584E7E748F5C9F1AEB0C04578916AF19902EC45F37E912317CD5E20BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
SmartAssembly .NET packer
Detects SmartAssembly .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
116827
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
108KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
172KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
89c6b68a3f89ba654147a93836cb517f2e1a78da2ac27b2a7de637a3748ccc1f-cleaned
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f24bbb2c28e3a3ab2329ce13fadde65c9596396b02b1c21c6d6ae4cebc6f38bd
- MD5 689bed9c92084eac9912ea31000c57aa
- SHA1 131e317b460d825a6052ec2f5d1a9e43eca5a37c
- SHA512 3c8586a7f3bec4361e6b8900f3b16f65e868c9b7aeab52cbcbbb4baf163bd65eb5af52f7709439fcc653448c035132aa8a445f0db2a03dfb0e429c25264230e1
- SSDEEP 3072:MUc8VlLizVc+Aes7GVGNVGWPo/0BSgB+jGBce:MUc8eB20ioMBSy+q
- TLSH T162542D9C28FAE584E7E74CF5C8F1AEA0C04578916AF19902EC45F77E912317CD5E20BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
116110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
105KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
169KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ