Behavioral task
behavioral1
Sample
3795cdc7a81d572e1a91d2bf43991bdd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3795cdc7a81d572e1a91d2bf43991bdd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3795cdc7a81d572e1a91d2bf43991bdd_JaffaCakes118
-
Size
213KB
-
MD5
3795cdc7a81d572e1a91d2bf43991bdd
-
SHA1
52ab4d4e696ee65f5d971c1c34b143a9ea116f7c
-
SHA256
cdf3f7dece8fbc246372517f9c1c802aa7600c73606a416e0f2f4b1e38a1020b
-
SHA512
f4de5e80fbfc877624d2ccd4913bb6294c70329481f4edf8a5ddbf8e3d19b113ba3d9272121a868f76edf3bf587b2b4cb80154c62ac232a787b9bd0e61583be0
-
SSDEEP
6144:DqhypVvHQyzcMyL3+NFe+Qppq3gLYi8r/hweaF/+x:+KwectL3+De+QKk8r/hwee
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3795cdc7a81d572e1a91d2bf43991bdd_JaffaCakes118
Files
-
3795cdc7a81d572e1a91d2bf43991bdd_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 177KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE