Behavioral task
behavioral1
Sample
45599b577a14d0a1763c99cb497b60b5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45599b577a14d0a1763c99cb497b60b5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45599b577a14d0a1763c99cb497b60b5_JaffaCakes118
-
Size
2.2MB
-
MD5
45599b577a14d0a1763c99cb497b60b5
-
SHA1
8c17ad4b0c7b53b6078fec0e391d1d66a02afda4
-
SHA256
05c78e85f3b1ade2dd221c4b9bf6361db732dd1a7fe4948038ce0d83c3080fc3
-
SHA512
1b52eadf789685727721d80f887788bd85c4760f0a81e24a84d91022b1d28103d859678465832c6e6a34e70288460901da1dea81b1cbfdebd782b86ac08e919b
-
SSDEEP
49152:WF4d0qED2n1X1gjc1Knci2SDU84jsonP6bVPZE0CSDeHGBiMTcffB7dxPMGp:WqdmDu1X0c1KncUDU84l6blDemIMT6f3
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45599b577a14d0a1763c99cb497b60b5_JaffaCakes118
Files
-
45599b577a14d0a1763c99cb497b60b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
RG"6/+RL Size: 380KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gNq).ID# Size: 22KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
)OuI-qo( Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
D\3erfAw Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
,8x#Q<d- Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vAu2;&]o Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
I7:([i5- Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OT5H1"q. Size: 955KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Nvs.Aa!> Size: 739KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
+rH8O@yb Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7?-M)/AF Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u;6YHqsM Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
p&c7']6A Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE