Behavioral task
behavioral1
Sample
422c61214fea9710483ac5dbbde1c8a7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
422c61214fea9710483ac5dbbde1c8a7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
422c61214fea9710483ac5dbbde1c8a7_JaffaCakes118
-
Size
144KB
-
MD5
422c61214fea9710483ac5dbbde1c8a7
-
SHA1
6ff6d654c4f5bcf7ab163ded25b630735d313205
-
SHA256
c867ea5317f7782788975786d3413e2eee3a2f373ed1b2adfef646ecc79c8030
-
SHA512
c0acdb70aaf22cbb94d76537e6bd382b0af219192898fdba069b2c4f5e7d8720f3c0a57e1244f137000e1fd03098903179526a871c9a119bad31cb335b4008a7
-
SSDEEP
3072:TeS7kZsCQzh0QcVXAFM4hBq7BCz6F9M2m6GVAWgPDr:ezuh9qB7HGyhDr
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 422c61214fea9710483ac5dbbde1c8a7_JaffaCakes118
Files
-
422c61214fea9710483ac5dbbde1c8a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE