Behavioral task
behavioral1
Sample
075b836bd38f0988c4f73f386d595f9b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
075b836bd38f0988c4f73f386d595f9b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
075b836bd38f0988c4f73f386d595f9b_JaffaCakes118
-
Size
91KB
-
MD5
075b836bd38f0988c4f73f386d595f9b
-
SHA1
6a881dfeba0c6f1e963e3bfb7a58b29dd43dee40
-
SHA256
17da19e20215015d8a00e271fce3e376c3a1b0da50fe00a460aeca4e7458c5bb
-
SHA512
204210831e624f665761da9c88a8a95fe5b85b9453f747cfb5802585b5f8a226ec6c1203ce67ee136d5a1d9bd5a1e394a60ded597f2e8649f03434577270204e
-
SSDEEP
1536:qx/XhgGIBvLcQCyuT0JFWvsbFL3C+vJqFldGb5rZY/RX/Jj33EXPZ8v41c:qBClcQY0JFWAy7O5dqtxjHuPZ8Qq
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 075b836bd38f0988c4f73f386d595f9b_JaffaCakes118
Files
-
075b836bd38f0988c4f73f386d595f9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE