Behavioral task
behavioral1
Sample
29e148930dabb5eabcff39e9ffcfd624_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
29e148930dabb5eabcff39e9ffcfd624_JaffaCakes118
-
Size
128KB
-
MD5
29e148930dabb5eabcff39e9ffcfd624
-
SHA1
c0ab26051d21fd8481d42a9404fea09625928afb
-
SHA256
909083487ad72c3860fa6a75b032ad012a77f8e843d5f41be4634da00a1690a5
-
SHA512
2608bf5392d8f56cbc92db2cc04688ab88f83db03f07e026bb40a014549c6195431eb2fced9fd73a3ae07552169f2a6cfc8c267fc593638a278a61412ac6da7d
-
SSDEEP
3072:P7/YmXArLRyUMls5KA1jbWgr/qlZxAPLfGbibelPFbauzv6W:P0mer/qgr/qKPLubtl9bd
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29e148930dabb5eabcff39e9ffcfd624_JaffaCakes118
Files
-
29e148930dabb5eabcff39e9ffcfd624_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 100KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE