Behavioral task
behavioral1
Sample
44c46f9bfe1e72d15fb5397313137627_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44c46f9bfe1e72d15fb5397313137627_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
44c46f9bfe1e72d15fb5397313137627_JaffaCakes118
-
Size
306KB
-
MD5
44c46f9bfe1e72d15fb5397313137627
-
SHA1
b674151f83833974c2e295c0defe5f148425fc6c
-
SHA256
a1e0bbf5aa86c4714b6a4a99ae362d9df45938fa19c3cbe26ff9e5c702a507bb
-
SHA512
7bb2cff7345ff9c3e7b952bdf91fbb26fe6a8acf9bc20747abddfd75af27c6ec296e6a528dd276fdf8850517e0ac3524fff901a9c9ed4e94604adc7a66f9ca41
-
SSDEEP
6144:xZ87wdG9LzKVdIVFojY0m1C0HVYVD6vdqUpmspYFPAeH95:387HsdEojY07HsvfpgFPH
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44c46f9bfe1e72d15fb5397313137627_JaffaCakes118
Files
-
44c46f9bfe1e72d15fb5397313137627_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 35KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE