Behavioral task
behavioral1
Sample
ec07eaa0c19a1a0987c2ea9fb7c4493f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec07eaa0c19a1a0987c2ea9fb7c4493f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec07eaa0c19a1a0987c2ea9fb7c4493f_JaffaCakes118
-
Size
2.5MB
-
MD5
ec07eaa0c19a1a0987c2ea9fb7c4493f
-
SHA1
384996a1096885ad801656b633c9b91197662965
-
SHA256
2237672754c71b0f5c9bcec575df3d2181babab2d0fa8ad54b92fa031c0e5d27
-
SHA512
c8f162d8359c0728bc685c2f20524dbc41a1b7f5abec36ea5f053d08b2384e9558ef3fce4abb79f4c0193e15a9d3c8303ebe3bdff5db845e4d81663a7dfe8c7d
-
SSDEEP
49152:LV29R0Yw9UDI4l09IEl9XXl2XIVIBO6T/9D69KD9bKar6VF6V:h2bwUMiOIE9XEYVIBFyMbRyK
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec07eaa0c19a1a0987c2ea9fb7c4493f_JaffaCakes118
Files
-
ec07eaa0c19a1a0987c2ea9fb7c4493f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 290KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.2MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE