Behavioral task
behavioral1
Sample
47a6ed2f5c3f1cec566a9ebd2db4711e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47a6ed2f5c3f1cec566a9ebd2db4711e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47a6ed2f5c3f1cec566a9ebd2db4711e_JaffaCakes118
-
Size
1.2MB
-
MD5
47a6ed2f5c3f1cec566a9ebd2db4711e
-
SHA1
274da5a8c2d212f49263783f5e38373cc54d90e0
-
SHA256
460e2502a3caa4168ee6430af605b929b6b65ee2ad6e2cf80ca250040a4e641c
-
SHA512
72679e56d1d478974021aa0e5f942bbe3001648462e3d87694eb102dd1d94ab96c966b4bc3da58b555220dc687db8dfdd71f87a2646866d673717f89e024c43d
-
SSDEEP
24576:LNOSXCu/Ecf6d0Tbuwj4NHP+L04IKSPBBOw3KruD0nWCMCRjDLSCjB:ZXX3TiuTGHmI4IKWBBOw3yuXej/
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47a6ed2f5c3f1cec566a9ebd2db4711e_JaffaCakes118
Files
-
47a6ed2f5c3f1cec566a9ebd2db4711e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.1MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 51KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 45KB - Virtual size: 122.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE