Behavioral task
behavioral1
Sample
2ca7afdf1fa3b0b176f89bd2fe776c1b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ca7afdf1fa3b0b176f89bd2fe776c1b_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2ca7afdf1fa3b0b176f89bd2fe776c1b_JaffaCakes118
-
Size
375KB
-
MD5
2ca7afdf1fa3b0b176f89bd2fe776c1b
-
SHA1
838f2232d8913b4e4dac9baffec730a32e457f6b
-
SHA256
1cc73df2c0ed0cf5548d28f9dff924d034a3b82e4935e2a4e4e8744b49cfdb9c
-
SHA512
4c3b3a9ec3dcf30ce88cbe06adb541ad9735f73d29d0eed6ebe8ad3ecfa327a99d99d983fdf0a6524b4761550a6db1991c1aa17d449a0b9695c74138e7514bd7
-
SSDEEP
6144:Q6xI3gX69BG4i2VSrCIJoOaygAS4deQUlNEPtghTpuh4Qb188f32yNtl:QWIU6vG4jVSrCImOoseQUlNc2Qq8f32e
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ca7afdf1fa3b0b176f89bd2fe776c1b_JaffaCakes118
Files
-
2ca7afdf1fa3b0b176f89bd2fe776c1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 325KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE