Behavioral task
behavioral1
Sample
e9929fb0ab9e9f3ab98c7cba2a7dafc1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9929fb0ab9e9f3ab98c7cba2a7dafc1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9929fb0ab9e9f3ab98c7cba2a7dafc1_JaffaCakes118
-
Size
24KB
-
MD5
e9929fb0ab9e9f3ab98c7cba2a7dafc1
-
SHA1
f400016aa51fee1eadcef7cf1fce0472dce7ff59
-
SHA256
729e30644f04ba8f823e9e2611b3f8df7f6db5201086cc330065fd2a4bf27938
-
SHA512
81755d03886092a48670d16b92cabd9b7b45deb5900f90d2f2914657c2322a240788ed36576e09f8e47ebb39800362c1cefe13b521fe4ae0a7c150bde5b0bcdb
-
SSDEEP
768:+pUOsKqdHnWO7YvfdqcIjJ7o6CIhxBha5:+pRsXdHnx7Yd6jEg
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9929fb0ab9e9f3ab98c7cba2a7dafc1_JaffaCakes118
Files
-
e9929fb0ab9e9f3ab98c7cba2a7dafc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE