Behavioral task
behavioral1
Sample
1ba33bd4bf4a50ec6a679bd9d6c1306f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1ba33bd4bf4a50ec6a679bd9d6c1306f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1ba33bd4bf4a50ec6a679bd9d6c1306f_JaffaCakes118
-
Size
47KB
-
MD5
1ba33bd4bf4a50ec6a679bd9d6c1306f
-
SHA1
04589cf88e6cabec4a8d3d519e9934a4a28c4b97
-
SHA256
19b59377d611469b739aa21bc193821f9ebdb0e65296bd55f4da6b211318ade2
-
SHA512
74be84c9a8c5f62d89dc4c6bc6ebdd0e1d7ff964b74e898e77e25ad32df10fc18399e38b1b4cd286c4ff426d4d4dbd2616f7949bdc9601f7466e1fbe41222664
-
SSDEEP
768:BzUu0zqtsv+1gmhmLIivqulsNyk0hhQVhqOofs4P1paxHPs0ZyOIbIWz+coQxyds:BIrm22qmh6pOyk0hhQHof5DaxHPs2qbc
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ba33bd4bf4a50ec6a679bd9d6c1306f_JaffaCakes118
Files
-
1ba33bd4bf4a50ec6a679bd9d6c1306f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 37KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE