Behavioral task
behavioral1
Sample
0aa5d33c94d516f4f9a9080b7693ebdc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0aa5d33c94d516f4f9a9080b7693ebdc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0aa5d33c94d516f4f9a9080b7693ebdc_JaffaCakes118
-
Size
2.8MB
-
MD5
0aa5d33c94d516f4f9a9080b7693ebdc
-
SHA1
132d4e049d9e28dd898da34b44a25cc41c929bc7
-
SHA256
e801f5fb0cc90ce2748a5eef03e0fcd6976110008e2b07d95e505335eb1ff2fe
-
SHA512
58e9043dbfab6ae0c65914f613f77f922bd6e6d03c521f71c4496de3ce7d674d8f160ee2d6e1e19a18b9fea0148ad2316c5c95a5a6f9295df241cc08538cca0a
-
SSDEEP
49152:1rLUF8wR8fDkL3lCDWe30MdxNT1Gk7fNi8BtVUEPEquRIBz3EuUOMQ0HgW+UYZse:V/g8wLsp3W4vBtVXPueBEuzMLKUY6
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aa5d33c94d516f4f9a9080b7693ebdc_JaffaCakes118
Files
-
0aa5d33c94d516f4f9a9080b7693ebdc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 2.8MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE