Behavioral task
behavioral1
Sample
188e25411afa522439b0dd4a9a4231c9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
188e25411afa522439b0dd4a9a4231c9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
188e25411afa522439b0dd4a9a4231c9_JaffaCakes118
-
Size
86KB
-
MD5
188e25411afa522439b0dd4a9a4231c9
-
SHA1
7da0d32a30d74fdbed4b7092aa2d35e6b27e66ee
-
SHA256
d9ec759ee51fbb4e1bf23c71b415365c4d33fe3bb5ba675f673791ee8e444256
-
SHA512
39f9c838fb1b20f74b63282596e72423bf9d70f13e735a40227e034c344e6771da6eed4284a94c3b40c99690c160101b547f0b67af83444b623b38ed4ce39e05
-
SSDEEP
1536:/6OT2iXAOTqOTSHpWk7Eq3B7+UShNeyyCjG71f8PL8rKhu8pZfN:XKiXNbbkwq35D4N3yCj61fK8rKhuuN
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 188e25411afa522439b0dd4a9a4231c9_JaffaCakes118
Files
-
188e25411afa522439b0dd4a9a4231c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 85KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE