Behavioral task
behavioral1
Sample
3a8219ce2e9bb3c0ef9205b7c9f6f22b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a8219ce2e9bb3c0ef9205b7c9f6f22b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a8219ce2e9bb3c0ef9205b7c9f6f22b_JaffaCakes118
-
Size
361KB
-
MD5
3a8219ce2e9bb3c0ef9205b7c9f6f22b
-
SHA1
9630440ca5f7a93913f420903d22528fee9e731b
-
SHA256
69b29c257058411c350124bdfbfd92be2c5e81d25e5624ea8373160a1667c7f3
-
SHA512
95cbb34482c66bd9c9084f8a0e385f4f5b7c793ce931a5efaf5ffdc329ee39159daf58de714488ef8057ba89d5ea45f04c5292b6d79a0809bb6e3f09fa64ad2e
-
SSDEEP
6144:pi7eN63lu2162cjvJy9vJyiX/0ZRm1zUQPAI5LZRHUDSPI3Q0mjDi9Vywlr5lg3S:pi7aanD0JU9M/mxUQPAeZRHUgoQ0mDgf
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a8219ce2e9bb3c0ef9205b7c9f6f22b_JaffaCakes118
Files
-
3a8219ce2e9bb3c0ef9205b7c9f6f22b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 25KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 322KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE