Behavioral task
behavioral1
Sample
0ffe03f6d2b4207b3333f7f676a63cb8_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0ffe03f6d2b4207b3333f7f676a63cb8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ffe03f6d2b4207b3333f7f676a63cb8_JaffaCakes118
-
Size
496KB
-
MD5
0ffe03f6d2b4207b3333f7f676a63cb8
-
SHA1
9f63418eec8a8bb7b6a25bdc4454058cf5804231
-
SHA256
d99c6328b3fbd1f5396558c0489312ccf7bc79c16e3dfb06def36bc7c11f36d1
-
SHA512
11fc797abebfc9262f3c47b47874316d1e21a72b64cca80fa3fea6123bff0ee6184dbeb48570e9fbf1042d0dd61cc85b70f6561ca6cd0c5343b8983b8c815e20
-
SSDEEP
6144:hXKT4fwyMRcC2PmoBQtoKfNMukJXuOAOAaZTdV:5Ehyf+0cLfZT1
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ffe03f6d2b4207b3333f7f676a63cb8_JaffaCakes118
Files
-
0ffe03f6d2b4207b3333f7f676a63cb8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
goa9a7gg Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n1bd2p4q Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jrh9oj5b Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
40fgu3lg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ