Behavioral task
behavioral1
Sample
0fb74b76104d5483ecf7a52ccada92cb_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0fb74b76104d5483ecf7a52ccada92cb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fb74b76104d5483ecf7a52ccada92cb_JaffaCakes118
-
Size
1.4MB
-
MD5
0fb74b76104d5483ecf7a52ccada92cb
-
SHA1
f41e9e3799912b87ca27210d737aa5b373c1292b
-
SHA256
0653baa99caf2a236aa6bd6f7ca6f1253c5bf84147b06de1313fda5085477d78
-
SHA512
c200b57cdab59440eb67996369ea61b6bb1175271f1d07d6f3e476a02f01c1feee19b4f5c5f45aa6f4e6cb097c468bf52072f6cb823b738bd0a57be2842d6c2b
-
SSDEEP
24576:92qkukJj/YW25jywvPArc2LZ/0ZX005F0r8Zr8w5Sqdi5AbLwQ3C5EsJbMqKT:0qrklJ2P4c2F/0ZE05FDYw5+Wba5lMqI
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fb74b76104d5483ecf7a52ccada92cb_JaffaCakes118
Files
-
0fb74b76104d5483ecf7a52ccada92cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
v9*Vw9[k Size: 412KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Uy>pR?jL Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
G')i^8*l Size: 19KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vk pc<$1 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1d1/Xhxi Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q**LN#Z Size: - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ae.W]Wm' Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xk%&(03j Size: 56KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vS&Kb7<e Size: 698KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o&(Z]O&v Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q0GE;K$Z Size: 36KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asp Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE