Behavioral task
behavioral1
Sample
02cc7dc5aec377f2502a6ea0ae1b5b88_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
02cc7dc5aec377f2502a6ea0ae1b5b88_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
02cc7dc5aec377f2502a6ea0ae1b5b88_JaffaCakes118
-
Size
59KB
-
MD5
02cc7dc5aec377f2502a6ea0ae1b5b88
-
SHA1
f3e6ac9421b81c0c7f5c35ee974a43eb00d3c845
-
SHA256
25a607d7f13903beedf0ca0a5ba68d3f4c19c82186566bb89f27c3e30f4c2b9b
-
SHA512
be98b4bf31d8a82cd7a750d82baeba860cf89f56ccc11ee53fa2710212b3b0fcf875569982a2c2a97709570533e7c2ea5e2e92bc4b14407ea4aa21fe2f9fe035
-
SSDEEP
1536:TrmqMOe1SiJo+e+GhmuDeUsR3dIcXjMKMS0N8/JIepO:TqtOAS6te+Tusp2nKMS0eJIB
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02cc7dc5aec377f2502a6ea0ae1b5b88_JaffaCakes118
Files
-
02cc7dc5aec377f2502a6ea0ae1b5b88_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 40KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE