Behavioral task
behavioral1
Sample
0d68c99631ae9fe9a00d976337965fcc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d68c99631ae9fe9a00d976337965fcc_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0d68c99631ae9fe9a00d976337965fcc_JaffaCakes118
-
Size
91KB
-
MD5
0d68c99631ae9fe9a00d976337965fcc
-
SHA1
bb6eea46d43ce10be6873250f705375dc7b4fe48
-
SHA256
6b991cd26d06fa3c57d95d60612785a4882a2c44d53e53f38e840987ff3d37d6
-
SHA512
4ac5c0a971df77e221a612f71b1be50b4f188d9d6bdf89a6b3e4b781d4b2738c75669b875ab3893a4bf5269849ea75ba4e1e9ab6f36012ece89c61083004b265
-
SSDEEP
1536:VO04K1DvngkaN8RK94fJq/3UkMwRaUtdau7UL5Je:skznO8M94Y3UqRag/7Ue
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d68c99631ae9fe9a00d976337965fcc_JaffaCakes118
Files
-
0d68c99631ae9fe9a00d976337965fcc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 34KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Eg� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE