Behavioral task
behavioral1
Sample
0966efddb404e60d671413c3198f6e76_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0966efddb404e60d671413c3198f6e76_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0966efddb404e60d671413c3198f6e76_JaffaCakes118
-
Size
961KB
-
MD5
0966efddb404e60d671413c3198f6e76
-
SHA1
37a248a01fa11e3533b483449b9c50fd36ccbfe8
-
SHA256
2f3ff9e2add09b187d7c2d4d47f666836f84ae4636ba45b278018d576e15a9b8
-
SHA512
4fb5d04f6afcba3cd9330cb2b959276bd844de190f7ff682c092bf89e350e282ef2c317dc4c76a411aaf03bfca2185e5b1b9cc9ee848c860358be50b4e7e6669
-
SSDEEP
12288:+8bP3nv7ZYqgNEIrEkovj0bidyzNJbT7SvVX86avEF8JMkKzawF:+8L2rRovQfaXVav9MkJ+
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0966efddb404e60d671413c3198f6e76_JaffaCakes118
Files
-
0966efddb404e60d671413c3198f6e76_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE