Behavioral task
behavioral1
Sample
37cc66107fdd62c046ce98e6793d9424_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37cc66107fdd62c046ce98e6793d9424_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37cc66107fdd62c046ce98e6793d9424_JaffaCakes118
-
Size
716KB
-
MD5
37cc66107fdd62c046ce98e6793d9424
-
SHA1
a0e752564f99eaa12d52f327dbdd3f5d5bb73885
-
SHA256
d214f4c4b44af2881a4ac5d8adb4175e3c856ef4cc01a32438e48a02439e99f5
-
SHA512
5e58a0b17e4112a4706fbee7731aac9484b0af0716b0225b5dae3688a31f2c25e9c0c8a3586b62d8a6c916543350c9d09b71e133057bb9a236e9d4343c8b6264
-
SSDEEP
12288:YSnPC+Y7Obk2rszUL1HaySV2ncGGusCvDyYX1cbbtp2D6x8wIFYnJx:RKRObk2rQ2n1Gu5vDyT9p+6x8wIFcx
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37cc66107fdd62c046ce98e6793d9424_JaffaCakes118
Files
-
37cc66107fdd62c046ce98e6793d9424_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 138KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 15KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 537KB - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE