Behavioral task
behavioral1
Sample
fe71071db5ce58b2e91939e31c9cb4c0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe71071db5ce58b2e91939e31c9cb4c0_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe71071db5ce58b2e91939e31c9cb4c0_JaffaCakes118
-
Size
324KB
-
MD5
fe71071db5ce58b2e91939e31c9cb4c0
-
SHA1
4a25ebc96e73b473164f9a97449c9dc9bddea8d3
-
SHA256
270c91a657e2f532e10652c4512445898bd92e036a4448f94bfd424449854562
-
SHA512
a3b5b8655a154e6b7a564bf1e6ea965f511f8af8f8a217f963a64a792a7ac36a89aadf3cb0b844d3ab9b6e165a1dd537050f8bb3bbb2c5de4c1780b36b0da3c1
-
SSDEEP
6144:TUDRcb2ULNLWBjx6+guV4s9WXCsAaOxYlU/DAGZhbA7nPGiH:TeRW2ULNLw6VNCsJlm0qM7n+iH
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe71071db5ce58b2e91939e31c9cb4c0_JaffaCakes118
Files
-
fe71071db5ce58b2e91939e31c9cb4c0_JaffaCakes118.exe windows:4 windows
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 267KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE