Behavioral task
behavioral1
Sample
1c527b2835577fd027296ca65adf5c26_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c527b2835577fd027296ca65adf5c26_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1c527b2835577fd027296ca65adf5c26_JaffaCakes118
-
Size
564KB
-
MD5
1c527b2835577fd027296ca65adf5c26
-
SHA1
6da2f3eba8f7f36508bfd5d3188105f8d153e03b
-
SHA256
91ffa1548dd1de0075e8eef05e8722919136f988a4a2d0d4fe45a175f3b956d6
-
SHA512
3a52773f65edfcd3e274d7215f69853cc3723f147138adcf03e0e4d8126ce22f7a9ff573bc37763dc51cfd593f6b29a653b85d262bdf19de3c51ecf7720bc539
-
SSDEEP
12288:ddPfsvO5nKIn4codikwXVnI5a/6yv0gEICCOuZ1fUiFSCy4g4R4riZtH:ddHsvO5nt4cKiWGHMS7UtCy4ZReCtH
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c527b2835577fd027296ca65adf5c26_JaffaCakes118
Files
-
1c527b2835577fd027296ca65adf5c26_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
U9GLHJ,s Size: 494KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
"lwZdiyW Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
el(BDW8b Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
`NB[RyR0 Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
<(D4'+W) Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PT3WOnN( Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g9x5y(:n Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Hbgmcf%V Size: 48KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n81h85uI Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8)FQc#xG Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE