Behavioral task
behavioral1
Sample
2f0dbd3f1ea3ee00de62c7c7f33ab8ca_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f0dbd3f1ea3ee00de62c7c7f33ab8ca_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f0dbd3f1ea3ee00de62c7c7f33ab8ca_JaffaCakes118
-
Size
113KB
-
MD5
2f0dbd3f1ea3ee00de62c7c7f33ab8ca
-
SHA1
5ef92dc158579313120829097f70e00139e63b81
-
SHA256
5468c2d4f5208e2d36f2d1f9697b2ad62a3190b82d1cd0a43319e7ab5eabf720
-
SHA512
2ac107d3277519df6c7e9588a43439486bee07a18e36d100715e482395ea568f9cade19d190429dda38681df0dc010f67be19aa2116d67f0e1f234ac0572660c
-
SSDEEP
3072:J4c4n6tm8n1lQVfNroFEUrSvOXlC/qxaW+Pv:yc4n6ttcNrsl9xaW+X
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f0dbd3f1ea3ee00de62c7c7f33ab8ca_JaffaCakes118
Files
-
2f0dbd3f1ea3ee00de62c7c7f33ab8ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 1024B - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vcj9u Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE