Behavioral task
behavioral1
Sample
3db1408b2dbed6b6dcfef3c146ab2b87_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3db1408b2dbed6b6dcfef3c146ab2b87_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3db1408b2dbed6b6dcfef3c146ab2b87_JaffaCakes118
-
Size
73KB
-
MD5
3db1408b2dbed6b6dcfef3c146ab2b87
-
SHA1
71c1f442703558c255b025db40a450665cf6744c
-
SHA256
cf89bafca9d8826501e6fc25e657c462760e3b8913cca41f38f20190415c8a6a
-
SHA512
5b3b326e06b4ca5cc34179e84c61f4b77547cb02cf84b8caef492b71a53ee2d9fa9f001794dec220a18c1dc75c759f0cdbc3665cb37a16dc1f3ef510a827cd69
-
SSDEEP
1536:9in4izAsYequG62J0RTZOpUy3geQegkxP6QV9NQpnq/800NJ+q:whzAzew0RlOpUyZ3Onq/id
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3db1408b2dbed6b6dcfef3c146ab2b87_JaffaCakes118
Files
-
3db1408b2dbed6b6dcfef3c146ab2b87_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE