Behavioral task
behavioral1
Sample
3bc9c4e7e0b121a0620768b59f939880_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bc9c4e7e0b121a0620768b59f939880_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bc9c4e7e0b121a0620768b59f939880_JaffaCakes118
-
Size
138KB
-
MD5
3bc9c4e7e0b121a0620768b59f939880
-
SHA1
4217fa085d3c2e7749adfab3152246235c9df10c
-
SHA256
1d74f10b7c0ab6af098201792d05e1b9e0252d6592514008a8bdc75d1271e578
-
SHA512
61a33ff6e0ce7434f9f13653838f98c820299e0ea34ff393eaa1b41319630c6df33b2330f8b4dabe0cbd285dffa6998357ccf63a809d39f1cb5c2f0b3d8f970b
-
SSDEEP
3072:AlSxHY0GNPC9CVWQho3m55EwDSnm8R3Xg+v:AkxHTQhoW55Fnk33v
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bc9c4e7e0b121a0620768b59f939880_JaffaCakes118
Files
-
3bc9c4e7e0b121a0620768b59f939880_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 133KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE