Behavioral task
behavioral1
Sample
368a8bd0287399b562e33a2fc0ed8e1d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
368a8bd0287399b562e33a2fc0ed8e1d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
368a8bd0287399b562e33a2fc0ed8e1d_JaffaCakes118
-
Size
68KB
-
MD5
368a8bd0287399b562e33a2fc0ed8e1d
-
SHA1
470c13f1d10a2a1595c261904fa6482117abcd66
-
SHA256
6a7cb8dffc86e61bfe413ee01ef41a665b50d9e07a77bb58a3686a905ccc5fdb
-
SHA512
3e31eee4c40545616071504d33317aa66c66c835c80c8e9829a8ff077f6529b967f959acd018e79b306573ff0d44cadb6f93fb0e5b2b1f7eb7a43b1f4836650b
-
SSDEEP
768:dtgxUyn5Z7hYJPJHyI2HiwKGGrWB1IEVjq3clMYmhR7xvTlYUKrYhb/yZa+1sp0u:dgVYTHoNGryINghAxxb6QupQGVvxhxn
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 368a8bd0287399b562e33a2fc0ed8e1d_JaffaCakes118
Files
-
368a8bd0287399b562e33a2fc0ed8e1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Csxf Size: 4080.0MB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Dkio Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vcd Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ifrjg Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vjg Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsjdg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rhtgf Size: 63KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rvcd Size: 63KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rtj Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.abdfh Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA