Behavioral task
behavioral1
Sample
e87a2e9c1d3ab359c461ff5bb3b3c75b_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e87a2e9c1d3ab359c461ff5bb3b3c75b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e87a2e9c1d3ab359c461ff5bb3b3c75b_JaffaCakes118
-
Size
794KB
-
MD5
e87a2e9c1d3ab359c461ff5bb3b3c75b
-
SHA1
619cd87871c9e2db5f0f4c21d411e9e704a565dd
-
SHA256
e19f1afd61613bc3b628c9000edfeab333b4ada90d214f63ec8ac7cf3e1b0622
-
SHA512
34c65791efba2a1c8d8e47c9ff3cd52a0f6e3e501636ed124ec284f3c51e24486cfd22b697e995c5449468680be644686343216dec77e6d0eb07de85556d4e62
-
SSDEEP
24576:mvL5YPWO8JZkKbq+18D3jwJTUI2v7QVx/tCVDG:qJZkKbh8DzwJwnjQ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e87a2e9c1d3ab359c461ff5bb3b3c75b_JaffaCakes118
Files
-
e87a2e9c1d3ab359c461ff5bb3b3c75b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ASPack Size: 793KB - Virtual size: 793KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE