Behavioral task
behavioral1
Sample
e256a27a14192e9fea00194e31804243_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e256a27a14192e9fea00194e31804243_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e256a27a14192e9fea00194e31804243_JaffaCakes118
-
Size
136KB
-
MD5
e256a27a14192e9fea00194e31804243
-
SHA1
9ec9df721ecd19dab81ff332233e284aff07904b
-
SHA256
c26d41187b0f10951935e32a11c0a46c98354b495714d01f57a9d2574534f51c
-
SHA512
90965a6bdfd72a2accd2531f03c8a65426832ec3864c5b07d5df5d29c1790f17b09c783215ed7a5385d107304053f19a3715d2c72799f04d9ffb9d7302f63278
-
SSDEEP
3072:3CdUjHcdA8miE/7/kuZHxAiFFdRCTPvqYP8mj7el:37jH0mf7/kuZHWqFuzvqYkmX
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e256a27a14192e9fea00194e31804243_JaffaCakes118
Files
-
e256a27a14192e9fea00194e31804243_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 129KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE