Behavioral task
behavioral1
Sample
1ac2d1393c7287d733f1fa3a3ee26038_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1ac2d1393c7287d733f1fa3a3ee26038_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1ac2d1393c7287d733f1fa3a3ee26038_JaffaCakes118
-
Size
42KB
-
MD5
1ac2d1393c7287d733f1fa3a3ee26038
-
SHA1
8bdc75c8369299a9eba4c7281f39d1c32e1bbe34
-
SHA256
916306495e3a91bfa92b0855ca8907e9cb0f8d26fd211c75c13f6952fb84c1e9
-
SHA512
43ead12389faf245c5f399881b8a0d5fecd73c203b3836f67e40933e981b461a18e614a273e38f6f68ed6de23a6235e185ffb3f787f1784bb4c484eb61585784
-
SSDEEP
768:bOirfptQvJ6FL412t7wiIBxk0G7FvNT56BXvb0gx66Q1OoRzxmdeV:bHfTmOtCBxs5V56hTPxLQYaQ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ac2d1393c7287d733f1fa3a3ee26038_JaffaCakes118
Files
-
1ac2d1393c7287d733f1fa3a3ee26038_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE