Behavioral task
behavioral1
Sample
fa311426cc228ac32e0e9d6362411bff_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa311426cc228ac32e0e9d6362411bff_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa311426cc228ac32e0e9d6362411bff_JaffaCakes118
-
Size
343KB
-
MD5
fa311426cc228ac32e0e9d6362411bff
-
SHA1
58aeff8434dec69373f9e0fed329ea8ec393ffea
-
SHA256
5b3f4b1c77b21a897d7f98cf31858e6146b383fddff4f61c0ec97e08a9b915a1
-
SHA512
211f90e6b95d7ccbf4fca8604623e5a7f0f2f2061f6051a8957cf8fbba724afacab60b3ef6532195e8111b1b299ed18202c856d87021e7cc3d91a800c7cf8484
-
SSDEEP
6144:/dKOzb6Ab9MsTSK7JRk+Mh/NuoXwq9FXzQZIu4D4W6RDHKieL4ur+DNo/I/jjDad:/dV6A6a7bk+MdpXwq9F7uk4W8aLeD/jm
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa311426cc228ac32e0e9d6362411bff_JaffaCakes118
Files
-
fa311426cc228ac32e0e9d6362411bff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 283KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HaoTian Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE