Behavioral task
behavioral1
Sample
05aad1a87532c9c49095156e7aaa29bd_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
05aad1a87532c9c49095156e7aaa29bd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
05aad1a87532c9c49095156e7aaa29bd_JaffaCakes118
-
Size
55KB
-
MD5
05aad1a87532c9c49095156e7aaa29bd
-
SHA1
8af7f8efc58d6dcf61e829083883044f2fa0809a
-
SHA256
e62e60cb58f998d23d066d76ce5870960ee601a59375306fe8f7921cb9d4dd7e
-
SHA512
41ec0d2d4684edadda8aa4b6c021a4abf432e33b40270ebf7282487909d1787879c70644e49942baaa069c27f5551ff24f38ba822a06d00876361bdc17b7bf1a
-
SSDEEP
768:uwzTBziifTeiZSVWihwEknh0L7OTLeNfQf351bcgBH5T9Zztj7CzrWB9i3:jnEkh8OTKNQmg5Tf9u8o3
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05aad1a87532c9c49095156e7aaa29bd_JaffaCakes118
Files
-
05aad1a87532c9c49095156e7aaa29bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.ASPack Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ASPack Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ASPack Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE