Behavioral task
behavioral1
Sample
452521080f36a447a4b769353408aee4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
452521080f36a447a4b769353408aee4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
452521080f36a447a4b769353408aee4_JaffaCakes118
-
Size
291KB
-
MD5
452521080f36a447a4b769353408aee4
-
SHA1
88ad55ef9fe95cc9c510a577964ab3504ab77fa6
-
SHA256
9ae3003e7bf0509bfe5dbab517b7c4ef50f3b1fae3641f2f73d6941d25ea5959
-
SHA512
89c5e02177b0b9887026fc46ab5eed873fbbb4ab92095f6fb8b1cbf59b058570d48a3b389e9f3b579e70cbd97120da7d77208d781e6cbf65026bfa065483f213
-
SSDEEP
6144:S5XKTZm/7GugbdwlgtzLQeLkn9PNBDbSEiccWjD6Zjj+B2J7XU/LiFr:SQ+gb/f1GV3wSC+B2REGt
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 452521080f36a447a4b769353408aee4_JaffaCakes118
Files
-
452521080f36a447a4b769353408aee4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 273KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE