Behavioral task
behavioral1
Sample
1815e743ca915ed6b5e06b3efd8b742f_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1815e743ca915ed6b5e06b3efd8b742f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1815e743ca915ed6b5e06b3efd8b742f_JaffaCakes118
-
Size
342KB
-
MD5
1815e743ca915ed6b5e06b3efd8b742f
-
SHA1
c8eb81b1b18787a310604204122746c7dcb48df6
-
SHA256
49e6fc12aa424dcac4a24d73f2cef9e5530e215df178f7ae136f0777e6ce54a1
-
SHA512
0f7c466ba72207c3ed15dd1080d6c0c29398d1d9f0c84a1cc006ad6d71797ca632429156c13775464a2876bbb5f4ed13ec1a0f5329e32ae080d2dedf025457d2
-
SSDEEP
6144:rc0XnqtC74E2O3tatCg2ZokD3AI+7jiarKOwDyjn44oEWkN+rKgzR9mT5h1P19:nqQX50B2ZhDt4TKBYoBR9sj
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1815e743ca915ed6b5e06b3efd8b742f_JaffaCakes118
Files
-
1815e743ca915ed6b5e06b3efd8b742f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 246KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE