Behavioral task
behavioral1
Sample
15adcac8d58631969b1adb087b0fc038_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15adcac8d58631969b1adb087b0fc038_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
15adcac8d58631969b1adb087b0fc038_JaffaCakes118
-
Size
93KB
-
MD5
15adcac8d58631969b1adb087b0fc038
-
SHA1
d1059eb60b0b205a34ace957d2020d60937dcca4
-
SHA256
6c1b202b00e9372e3275d833a6d65a887c57e11aa740d6a02d0e4d7b4504a7d5
-
SHA512
4ccb7d50ef9632166a7a4bfc45b4cf9a1f1100b4c117e9314973ff7fe40901f5389a3d569f0c70fe48351d7ac7b965c5701925436159932795936515d945b2b3
-
SSDEEP
1536:SetHaQ5jeDD0iVGL7yopfEbWr/H908pKeMmmoz0HNVgHvsAPYRGX2u6:Ft6QReDDzEO+yW908pK60ovsAPzd6
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15adcac8d58631969b1adb087b0fc038_JaffaCakes118
Files
-
15adcac8d58631969b1adb087b0fc038_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 55KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE