Behavioral task
behavioral1
Sample
22ea0b5d9f536e715f73d703c2a1f382_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
22ea0b5d9f536e715f73d703c2a1f382_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22ea0b5d9f536e715f73d703c2a1f382_JaffaCakes118
-
Size
869KB
-
MD5
22ea0b5d9f536e715f73d703c2a1f382
-
SHA1
043c38a5641fab7b0d543ce1578bb84cb4d3cd20
-
SHA256
6eee0cb7ce1b5d6de358987faf18b0ec3998aca060c7053e1030686b587af30a
-
SHA512
4d4593b0231e785aafdac7971eca87141793551a791695bb1752b9c42d916d61eb543a19b9627c786d80d94f0e3859a7a0fd30ccce4f9a7f2f43b33db4779bcd
-
SSDEEP
12288:aye+bHhr/oGQVh47aGOWqx6LxgMOW23o25SSKR2KsyULFLEbyGv6L3HD3ef0tLpj:5eENoGEGrqROYSD2rJS6THLestgMu
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22ea0b5d9f536e715f73d703c2a1f382_JaffaCakes118
Files
-
22ea0b5d9f536e715f73d703c2a1f382_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 377KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 465KB - Virtual size: 10.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE