Behavioral task
behavioral1
Sample
0be07d43afb6fb76e217acb58a86527f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0be07d43afb6fb76e217acb58a86527f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0be07d43afb6fb76e217acb58a86527f_JaffaCakes118
-
Size
137KB
-
MD5
0be07d43afb6fb76e217acb58a86527f
-
SHA1
d0ad6ec0bd0f32f26a37792d4ee834372962d0b1
-
SHA256
94f1fb92ced965bfef689f96e0644dc782f99dee4504c26ec7b3e74c3e4ef9b5
-
SHA512
324676be7596015557e2f98c841412a76d3235dd4baf27594b1b6d1a7382b6910b13cf109042fdc2655a860607775072eb35c138e791cda77b4b5cca48b4cbc5
-
SSDEEP
3072:GjL6PFaMGccj0NJEQu9hBKnHiNYZ2VjXzHZo8n3Yw1:QL+/ASqBKCNBxZ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0be07d43afb6fb76e217acb58a86527f_JaffaCakes118
Files
-
0be07d43afb6fb76e217acb58a86527f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 131KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE