Behavioral task
behavioral1
Sample
23e919e4c8131c508a5c43d98b2db6e3_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23e919e4c8131c508a5c43d98b2db6e3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23e919e4c8131c508a5c43d98b2db6e3_JaffaCakes118
-
Size
186KB
-
MD5
23e919e4c8131c508a5c43d98b2db6e3
-
SHA1
1832aa4b4638f6b75611a3c88f85bf1f95a95a69
-
SHA256
1654a4a9d6772833d1b541e7338ac86416f1e00079c7f713be74391a1a4bb376
-
SHA512
1187249f0a8b11544407ab46c868dc977a47abd055355d6421ce44cfdc7f42fbba0800408921a25c17e2d9b9f6ccf3ce8260b14a13582601628ee81e914b0b96
-
SSDEEP
3072:q4VImEY5PQsQfN+DwxkAejo3XfV+5Whczac04V0NkuIDxcF19Z2vxyIUHFd5W8B1:vHQ1N+8xkdjo3XNvg2HOuIDKiv8Im/5f
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23e919e4c8131c508a5c43d98b2db6e3_JaffaCakes118
Files
-
23e919e4c8131c508a5c43d98b2db6e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 185KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE