Behavioral task
behavioral1
Sample
151bc9b857693fba1e38790026a15fe7_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
151bc9b857693fba1e38790026a15fe7_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
151bc9b857693fba1e38790026a15fe7_JaffaCakes118
-
Size
40KB
-
MD5
151bc9b857693fba1e38790026a15fe7
-
SHA1
fedd1d4baaf4ca213ec81aab6c4224c69ce2c744
-
SHA256
40568eb3418fe28cbb2ac28671595a5b681c115b83b72a5f3aaa6f49b3a89234
-
SHA512
4199adcabe3a9a75630e35515d141ac5d914385e4842a074198f0415e5293807bf853afe94ff7072901c5fd6ee281c1c1143ee4fadd1016a3fe32281e701eeb2
-
SSDEEP
768:e1axErJm/1DeLf3YPiy+tl/970yuN4vAbWSxWha5:roJmNyLzt3/KTNkyq
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 151bc9b857693fba1e38790026a15fe7_JaffaCakes118
Files
-
151bc9b857693fba1e38790026a15fe7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
corepda Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE