Behavioral task
behavioral1
Sample
0313f05cf59073956583299a0096daa9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0313f05cf59073956583299a0096daa9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0313f05cf59073956583299a0096daa9_JaffaCakes118
-
Size
644KB
-
MD5
0313f05cf59073956583299a0096daa9
-
SHA1
c4d0d9aae1bb12b5f231559a0fc5d42fa40d2a2c
-
SHA256
935319639f43f95ab0543d0bcb183d1a91c8d9b6a23df4d473a94b46a6c2f1eb
-
SHA512
8ee40e1ecd052082cb1544dfde9cb1ad46c7c7844b9cfe6dff5b99108a50985622497b6df49949ad8c1e710c7701845357dc358ae5141f07631ae88360632e9b
-
SSDEEP
12288:uw4pzMGGPv3wZqFv+zorPlqjC+92nBps3SKpZMVBt3KKE0HKruJHnITtHCn7:MpzM/Iqx+EblKC+92nBO5pGKiJHnuti
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0313f05cf59073956583299a0096daa9_JaffaCakes118
Files
-
0313f05cf59073956583299a0096daa9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 244KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 353KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE