Behavioral task
behavioral1
Sample
2899de2d6e47692bb18ef80452aac392_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2899de2d6e47692bb18ef80452aac392_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2899de2d6e47692bb18ef80452aac392_JaffaCakes118
-
Size
95KB
-
MD5
2899de2d6e47692bb18ef80452aac392
-
SHA1
2f344039296b73204e9a1cacfa3d50f454d0d926
-
SHA256
8937afd0927774801a054c454b922b4c88be82d81cb255298ba8b117dcddf0d3
-
SHA512
fb6d5f8a84716f22ef6940728c009de23fdebf909f7ad0491800b4e7ff951001bd077710d431e3a9d4c8ffbb77fcd953c2abce8546b203c61068b8f28af60c49
-
SSDEEP
1536:rqUEIWIzXIs8kzXbK1cFyMvLzog/ELHmSDwXqN74LXfEAXGJYQxHhS9jMPfXICDI:rx1knk3GLscAELHmSKq74zf9X4YshS9v
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2899de2d6e47692bb18ef80452aac392_JaffaCakes118
Files
-
2899de2d6e47692bb18ef80452aac392_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XMA0D! Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE