Behavioral task
behavioral1
Sample
ea0673196d0f6dc9ac4e733a33a58d96_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ea0673196d0f6dc9ac4e733a33a58d96_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea0673196d0f6dc9ac4e733a33a58d96_JaffaCakes118
-
Size
35KB
-
MD5
ea0673196d0f6dc9ac4e733a33a58d96
-
SHA1
df2496f1fd3bb7066bbb2c3a019c7bacc7078343
-
SHA256
d3aab5bc06a03a7b3bcade88635a7dacbacbf02e99b90702ca5039aa733f5b26
-
SHA512
da1320e997335925a5d3092fd6cf7b182bc7553b75c978971927f9b3c3deccdb4e53b9c5b4f77f9e3941e04ba5efd8bdd13243028c633ad5767285ea5d2c45ae
-
SSDEEP
384:bSC9lPdb6/6MQt5CtpZDhSFpm/s7sPv/79C1DyAxUr6+S9Pfu7n5V:bSCTdb6/6M/bZDUjxQ/7epxTdeVV
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea0673196d0f6dc9ac4e733a33a58d96_JaffaCakes118
Files
-
ea0673196d0f6dc9ac4e733a33a58d96_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE