Behavioral task
behavioral1
Sample
37f4c7de9373707cadba33edd4f0bb72_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37f4c7de9373707cadba33edd4f0bb72_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37f4c7de9373707cadba33edd4f0bb72_JaffaCakes118
-
Size
385KB
-
MD5
37f4c7de9373707cadba33edd4f0bb72
-
SHA1
e020da174d4e969cc00d2a11b3d88b28d35d4ede
-
SHA256
5aaaec10839ba65562e421724f14597483261d23b469355869de479f5e2a7661
-
SHA512
0333462140acbcd04b31f32fab77c9ca0443955ebb09e8b8651b268e6b103534f8fbb994bcc13475d82f6c8536a2d464ce1b5e19a06ee3fd4b9e535026d9e273
-
SSDEEP
6144:sFWULSRFLqBjpsV5c0tQkrX2IV5pU/Gp3df1wy76MjsCrIDOo9qrdO4pO1:EWhFL8jpsAQQIX2I7pUuD1wgjst6mKO
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37f4c7de9373707cadba33edd4f0bb72_JaffaCakes118
Files
-
37f4c7de9373707cadba33edd4f0bb72_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 315KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 29KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE