Behavioral task
behavioral1
Sample
ed85cca16a92676d193ac5e18d66e28e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed85cca16a92676d193ac5e18d66e28e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed85cca16a92676d193ac5e18d66e28e_JaffaCakes118
-
Size
41KB
-
MD5
ed85cca16a92676d193ac5e18d66e28e
-
SHA1
ea398801c4b0d9df741faa40a20ad3a932a20023
-
SHA256
398146de92c25b6a5b73283962cb2d1944763d50d3ac55b660175d5fd04ff46d
-
SHA512
87477a1a72a069a6ad02699ef5bab58ea6961d4d9ed27ba0a5128efa466554f0cc43a80ef8c0ad6615315f968bdbed7e1d1158168f30d40e206df971fb4f37ab
-
SSDEEP
768:j64r1xNx+ha5hklM4aKTB7Ix2uAfLiox6130Lre53/KCY:jr1sWklM4aKTRiAfLi+Lq53/KCY
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed85cca16a92676d193ac5e18d66e28e_JaffaCakes118
Files
-
ed85cca16a92676d193ac5e18d66e28e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE