Behavioral task
behavioral1
Sample
28ad3dc275c3c21f38873e0a09af42e3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28ad3dc275c3c21f38873e0a09af42e3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28ad3dc275c3c21f38873e0a09af42e3_JaffaCakes118
-
Size
830KB
-
MD5
28ad3dc275c3c21f38873e0a09af42e3
-
SHA1
63d6a8912a57dbc4b41c1206fa636fee9d86e7da
-
SHA256
e6a959a702186a8d05333e52b5673e174bb46158a4cc92991859d4242184cffe
-
SHA512
75cc2ccb8f1b8a7578f246f10332f4e4466d82d2e729cab0adc1b9d94170c11ef8092dc21f34df0f9650749fa51bd99ec844b1634aa6e71263728c444ed1100a
-
SSDEEP
24576:tTXLgSA9SFALtazheNBQvCObQmX8w1wi9D9E2AQD:pXLgSAJL0defCCfmswai9D9TAy
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ad3dc275c3c21f38873e0a09af42e3_JaffaCakes118
Files
-
28ad3dc275c3c21f38873e0a09af42e3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 21KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 478KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE