Behavioral task
behavioral1
Sample
41c6ec5614168df39701554b4e221f6c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
41c6ec5614168df39701554b4e221f6c_JaffaCakes118
-
Size
47KB
-
MD5
41c6ec5614168df39701554b4e221f6c
-
SHA1
fb27e3b7e20c8e9f6cbe8efb576805774561ca61
-
SHA256
d87aafe043c8215feaf69ef4becf0d5690e5f14d2d3c42da376146a07803a4e0
-
SHA512
195caa5ea2f328e8f1fa1d229b260f01873359138519009ffdef562b1bc29b0873988a68dcb6956f863757816c9ba5e1a56d371dd68533048945760bec4cdb05
-
SSDEEP
768:/joVeGf9JarClKvNcxmWrW+Pk28O8BKLEawmPaxvDM4pEguuxiha5z8:Bw9oqxm8Wys9BK7wmixLMbFX68
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41c6ec5614168df39701554b4e221f6c_JaffaCakes118
Files
-
41c6ec5614168df39701554b4e221f6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE