Behavioral task
behavioral1
Sample
046e760db3c4dc349b8769c77757a4c8_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
046e760db3c4dc349b8769c77757a4c8_JaffaCakes118
-
Size
2.2MB
-
MD5
046e760db3c4dc349b8769c77757a4c8
-
SHA1
5cfa5785443ec15b2136d023882535e5cc18d44e
-
SHA256
592a93fe4a0ca8f01a37aeb848bcaec794505ffe91eb9f58219d69b2bd23a97e
-
SHA512
1f062c316a0ad18bc7a505f556631d5572c3ff182b1538bd80a8991a669ef13d5a5f138ddd2262194894b068ecdb8c2078c6672c392f71cc5dad8f0bdc1bb9c6
-
SSDEEP
49152:1ieIoAew7gHvtmTwNEaxkJpbiN4tyesP/m1y+rU4GMdH/XzQZ4:0eyB77Ur5ypsPeceUMHvzW4
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 046e760db3c4dc349b8769c77757a4c8_JaffaCakes118
Files
-
046e760db3c4dc349b8769c77757a4c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
_Qie5`x` Size: 377KB - Virtual size: 932KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t4P=ewm\ Size: 22KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/2nHfEf3 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
]QL6tZ8) Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jriHu@V# Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZE]'b&Q_ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u!N%>I.> Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t^Lv ?9k Size: 943KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w8/AlF/5 Size: 591KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bNitjGGP Size: 92KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
"X;nfF#Q Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VuIW0g3: Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kSo8!n*L Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE