Behavioral task
behavioral1
Sample
2b9b746ad6a385a256aae814cd4f95b6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b9b746ad6a385a256aae814cd4f95b6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b9b746ad6a385a256aae814cd4f95b6_JaffaCakes118
-
Size
155KB
-
MD5
2b9b746ad6a385a256aae814cd4f95b6
-
SHA1
0536d3ca17d24a50cf9c70a5cfdd7ab16e46365a
-
SHA256
3bc6b1e72649b6c5b3490a693bcadb8c6a59b382b56f5898d0b2941353e58fa4
-
SHA512
aa90d5241cdae5519683bf6aec68a70c7ad2e0abf7417070195cb8f6be7a2c5fc0cdece6689d2c5e0973e9918d24b56dcd8f8b77beb1d0dbe712901a5e028ba7
-
SSDEEP
3072:zuSK4c6yb6h3U15/VMJbn5WkBbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7:z9RclGhC/VoDJwvP6bQ7yMP+DE827t+Y
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b9b746ad6a385a256aae814cd4f95b6_JaffaCakes118
Files
-
2b9b746ad6a385a256aae814cd4f95b6_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE