Behavioral task
behavioral1
Sample
2e920db6a41e6e103a16a1d83d54a510_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e920db6a41e6e103a16a1d83d54a510_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e920db6a41e6e103a16a1d83d54a510_JaffaCakes118
-
Size
756KB
-
MD5
2e920db6a41e6e103a16a1d83d54a510
-
SHA1
e30afe150393b437af9863f5b8485738b6cb2be8
-
SHA256
443b474515bfe2bd14cfb9429580d7f6e1070377f656e62378e689bd26e9705f
-
SHA512
5763e195cc5b11ccdea7e5a5a048260bf93dcd59d60409b0a20fc726f598b5dd92e6e778d20d3d74aacd3a629f6a97c33fe83e09b3435324d9371e997160bdb5
-
SSDEEP
12288:JcPPXHUJtTp4iCM8P8TJeZ5y+yRp/0SVSKGn6PF3Z4mxxw3MP8NCU+m38kXT0FkP:JYHUJtThCVkTkZcJ/0SVVDPQmXlP8dMo
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e920db6a41e6e103a16a1d83d54a510_JaffaCakes118
Files
-
2e920db6a41e6e103a16a1d83d54a510_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.avx���� Size: 752KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE