Behavioral task
behavioral1
Sample
07a50729594cf11b8b452ba7f9470583_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
07a50729594cf11b8b452ba7f9470583_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
07a50729594cf11b8b452ba7f9470583_JaffaCakes118
-
Size
866KB
-
MD5
07a50729594cf11b8b452ba7f9470583
-
SHA1
82fac2fcffbc7d65b1133c1e5ec4f60e98a073c6
-
SHA256
c52d771ab8fbdc1d6d9ee56ff158dad1b8429aed4d1965bc2736035e1377ad45
-
SHA512
e4183435cf431169903761a3bd23e10cdd6c38d04073c5d1e11a292487f4be456cd81494d875538205de4cd236a7df35fe2dfb567f5e53bb7fa1765e3001baf7
-
SSDEEP
12288:M79MB6agqqTM8t/xM1AddGOHkRKXyy/y7hewc2yfrbxMNh3QpVEkunAqSRMe6vhg:MBMB67qqTMfA+OHkRvy/gW/x0gf1AM6
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07a50729594cf11b8b452ba7f9470583_JaffaCakes118
Files
-
07a50729594cf11b8b452ba7f9470583_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 578KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 15KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 235KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE