Behavioral task
behavioral1
Sample
f53fba5c89eb732836c3b3a727253deb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f53fba5c89eb732836c3b3a727253deb_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f53fba5c89eb732836c3b3a727253deb_JaffaCakes118
-
Size
51KB
-
MD5
f53fba5c89eb732836c3b3a727253deb
-
SHA1
c82164293dea5f956054390afec8c0df47a7a243
-
SHA256
f374623b129e1f9da2bea0d4b82ec1b8751dce345464c2ad01c6bcae6f290511
-
SHA512
ebc529f893c8d456b29278049506fbb3216c8b719b8a11c681dc8642cacf733c490ee62316bb31ca113249f7f2d45332420899fd536bc9ee250d0fa70e2fc6b2
-
SSDEEP
768:TsZX2AgB2Do7I2HvoMVR6d+OlXJ/UWYxOUWhjEFc7n/jXGxNfIijosI/HaGg0G5j:IsIogMVu+OlXRyeEe2Zp6fg0GZ1N
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f53fba5c89eb732836c3b3a727253deb_JaffaCakes118
Files
-
f53fba5c89eb732836c3b3a727253deb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE