Behavioral task
behavioral1
Sample
2dba596595059d1ad79f98d73b3089a7_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
2dba596595059d1ad79f98d73b3089a7_JaffaCakes118
-
Size
171KB
-
MD5
2dba596595059d1ad79f98d73b3089a7
-
SHA1
cbe853636dcbfc406037ef5836c5991082ddcbf7
-
SHA256
46c57b8c38bb6ab6cad8fc67d000c34e4158296ca06f34ade00c12c7013170fc
-
SHA512
8d44c03ff089248eeed8baf22d66e5d45a843fe08837a735a685ceb1399759ba7b2866ec96a445c45e235fb9ec63791ac20d8f81c0c78c75bd920287722d0659
-
SSDEEP
1536:rgmVu+90U6sP4dFcrMVBvNyDHG0rKNFKhVhTek4fvVVuMiGs:rgvPswrcrMVBlyDHG4KNeSfvVVuMu
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dba596595059d1ad79f98d73b3089a7_JaffaCakes118
Files
-
2dba596595059d1ad79f98d73b3089a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 57KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE