Behavioral task
behavioral1
Sample
429bec5d2011fefd76bffb13e996ba24_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
429bec5d2011fefd76bffb13e996ba24_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
429bec5d2011fefd76bffb13e996ba24_JaffaCakes118
-
Size
47KB
-
MD5
429bec5d2011fefd76bffb13e996ba24
-
SHA1
faf5034a8885ef26d54c9418eb67de28c972ae60
-
SHA256
49b0b8245666ce8dff61d98595d0aeed0437e91a8eae9d8dd1bbdd57ec3683d6
-
SHA512
9de325552d8ba2f496e9114814ce9ea2c48f18d5609adf68ad337274fc62c1de0b6ff72c24b855601db972fe0190856d4cede30b6f375f3defe5e99418d71d99
-
SSDEEP
768:hF7Gq/d7iLu3bmTHg/z/kr+JEJzRvl0KVM5WB/Xb73BlHus+R+MrrMJQED0yJGT3:hJ/3yg/ZCzR1Msb73uL+sJG0yJ6e2
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 429bec5d2011fefd76bffb13e996ba24_JaffaCakes118
Files
-
429bec5d2011fefd76bffb13e996ba24_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE