Behavioral task
behavioral1
Sample
371256b92f2e9c7607a9068d27a7e852_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
371256b92f2e9c7607a9068d27a7e852_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
371256b92f2e9c7607a9068d27a7e852_JaffaCakes118
-
Size
230KB
-
MD5
371256b92f2e9c7607a9068d27a7e852
-
SHA1
bf613c25c49007610b855eb6059915ca44ab9cd0
-
SHA256
047eb29278e10d3b8e0858b2c4e956ec67095e25dbe87417993fdabd12b74a1d
-
SHA512
c40a3a2805422ce71665329a47c44270eb74f31818f58981bb76b782927ce36b259c9ac0b33ec96f93287ce3bd8b6e17a1b528a3bc15689d52e8680738b71433
-
SSDEEP
6144:AvN/r5KRmLlqXOvrvDvWmDMY5vcKwyKFFGSCFs:AvNVKRKGOvrDvHDdfKFFMFs
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 371256b92f2e9c7607a9068d27a7e852_JaffaCakes118
Files
-
371256b92f2e9c7607a9068d27a7e852_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE