Behavioral task
behavioral1
Sample
fdf6a0377f1cfb17fd8a98501fd9fadd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fdf6a0377f1cfb17fd8a98501fd9fadd_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fdf6a0377f1cfb17fd8a98501fd9fadd_JaffaCakes118
-
Size
332KB
-
MD5
fdf6a0377f1cfb17fd8a98501fd9fadd
-
SHA1
b9025bbe3c6ffd61ca45b2e051c47981accf2c76
-
SHA256
fedb3ea83753989472930f09bdf10de1218809f1543fde85a0aa742ff2fb0375
-
SHA512
c878a82d0f5622b264d4d7110e91e0771dc37fd5d9a3483b760befc1a007298b8996e9cfffbf7390ab84fc5139d8c4f84f8e60566898a233b9802bbb2e38c0b0
-
SSDEEP
6144:Rkhem4xQh+OM1lj4u6z0VcwqAGSZ6Z2RX+xbM/D0+ud0g+mgJVP9AA3aM:yheHxQh+OM0u6zIcwq4Z60EMQH1+mgrm
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdf6a0377f1cfb17fd8a98501fd9fadd_JaffaCakes118
Files
-
fdf6a0377f1cfb17fd8a98501fd9fadd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE