Behavioral task
behavioral1
Sample
46081a9fb2aed1f25f8aa23def6973c7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46081a9fb2aed1f25f8aa23def6973c7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46081a9fb2aed1f25f8aa23def6973c7_JaffaCakes118
-
Size
168KB
-
MD5
46081a9fb2aed1f25f8aa23def6973c7
-
SHA1
920eda0b1d7fe79fde5445d2c09102b54077bbeb
-
SHA256
cd80c626ace2a0e67678a05ea17cc45eed5cd888b1fbb9af278dd21bea4d6ed9
-
SHA512
fb4582a5ff89cc8e340f417ad6cad3d3db0a4fb5883b6a5462420205240e96aa665ac5eeaf61f174b3f82316a2c15bc7f6f64d8b0ad3fdf34cbb817f0b31f85f
-
SSDEEP
3072:WfnRPKs15Fn/YiDQXlAdJ4tGyZdQg13gu3sKExfWI1a31B5g:ANv7F/5QX6dJUGGPFJ3UzC5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46081a9fb2aed1f25f8aa23def6973c7_JaffaCakes118
Files
-
46081a9fb2aed1f25f8aa23def6973c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 161KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE