Behavioral task
behavioral1
Sample
0e4e6b2147ebb938b9deff168b1e2ad4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e4e6b2147ebb938b9deff168b1e2ad4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e4e6b2147ebb938b9deff168b1e2ad4_JaffaCakes118
-
Size
52KB
-
MD5
0e4e6b2147ebb938b9deff168b1e2ad4
-
SHA1
9687ad359ba0e21db919bfe219dfce3fc2ffb74a
-
SHA256
1ddd73c936707e0cdd790ab3067d7f0f991f722879cf60c147a5ecace1d2e751
-
SHA512
8ba6512f42a9b765ca39ba27c8846abbe44528d8a0c47f78c30a4a8bdfe2444a0f476ced60c2b060eea482678892b31e799d7ed7766a81972db52f03009261b8
-
SSDEEP
768:ogbGcahqwW+NWce2O5J0JXdOtoYBG/g8lfkExFjoFl4x7ha5lsWy2+7UT:3qDJWue2O5aN2oHg8l8WFj2UssWyD7U
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e4e6b2147ebb938b9deff168b1e2ad4_JaffaCakes118
Files
-
0e4e6b2147ebb938b9deff168b1e2ad4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE