Behavioral task
behavioral1
Sample
38fce06b1438274a851699f403b6fd52_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
38fce06b1438274a851699f403b6fd52_JaffaCakes118
-
Size
996KB
-
MD5
38fce06b1438274a851699f403b6fd52
-
SHA1
31e98e5a34ea7b9d0e4c5a0324c181d1d0d01b69
-
SHA256
599207f76a541a927c0dc1562da47b6238e467f2240f1c36dbdbea04601e3475
-
SHA512
92399aff1264ef57e2218962f8733dbcc56e767379a0e79a725d506f6aac73ec2d8f7c093f6c1d473fd3a0d19be0758d242f537487ee482d5cd635b466001575
-
SSDEEP
24576:Ls/V2qUB6dGK9uZVf7WM6WjYRUDKKc+1FdHx6+4GWja5Nkqma7Yl:IiB6d19unf7Ws5Jc054R6Nk
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38fce06b1438274a851699f403b6fd52_JaffaCakes118
Files
-
38fce06b1438274a851699f403b6fd52_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 758KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 17KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE