Behavioral task
behavioral1
Sample
42b8e1d951daf2c2991e8b262e4ffa9c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42b8e1d951daf2c2991e8b262e4ffa9c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42b8e1d951daf2c2991e8b262e4ffa9c_JaffaCakes118
-
Size
27KB
-
MD5
42b8e1d951daf2c2991e8b262e4ffa9c
-
SHA1
ce68fb747cb0875eef184e34428370f11ee65752
-
SHA256
93a8356b1c1ebcff3a335a9a6b197289a8591de38407d6e956700638abb12282
-
SHA512
6e6bdf99d8280c09d61b36254795048cbbd72600289975216a15d00abd9bcf93f361897642df0d549895ff8aa96fd49a54a17615621db0d5e07cada2ad9a2471
-
SSDEEP
768:nSdfc2RVp7rqjPZHI1poLKj3qA8VzvBMpQRb:SZcsp7mbVI1aL2qdVzepQ9
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42b8e1d951daf2c2991e8b262e4ffa9c_JaffaCakes118
Files
-
42b8e1d951daf2c2991e8b262e4ffa9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
)`0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
)`1 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
)`2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hp Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE