Behavioral task
behavioral1
Sample
245e48d1f68a7869ca6eec2d9d3fe985_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
245e48d1f68a7869ca6eec2d9d3fe985_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
245e48d1f68a7869ca6eec2d9d3fe985_JaffaCakes118
-
Size
93KB
-
MD5
245e48d1f68a7869ca6eec2d9d3fe985
-
SHA1
1fb83aa47e4e29dbb30d3b042925443a31c5b623
-
SHA256
122d3d6484cc4a7c98c0f0db09ee959d13c6d3cdea157d2943dbd2f3323cad94
-
SHA512
e0532cd38f59d6d435d4a24e239bb33bf4213e3341e8ea49d995b2c75b8b18d21d8e93371fd56a5a35e204cba8572ca68fbc0720858b5e4052fa18b911f9185b
-
SSDEEP
1536:J8aKdYFBIjnC5Pi4Mf/C9VO+kpgSS6ZGcd87O37B84MMD7t0BISnYzMgn4q2Gi7v:oyFqTCPi4MUo+kUU3C+Dc9UMgnsuW
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 245e48d1f68a7869ca6eec2d9d3fe985_JaffaCakes118
Files
-
245e48d1f68a7869ca6eec2d9d3fe985_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE