Behavioral task
behavioral1
Sample
491724c1566ad28537f6e24d6bda9116_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
491724c1566ad28537f6e24d6bda9116_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
491724c1566ad28537f6e24d6bda9116_JaffaCakes118
-
Size
833KB
-
MD5
491724c1566ad28537f6e24d6bda9116
-
SHA1
19a49cbd97b3b9e9c67419ed8bc9c5db9cfce146
-
SHA256
c347013ad5c6f3848150d6c6d51b486e827379a74d0f64a14c8cf4cc139061dd
-
SHA512
cea4be3cc0c20d8ec639bd52d5d6d51a501e173a85b0bf544186c5fa9fb6047785c4ee8b45594a7c54f6aca7cab00451af43d84bb3d68a8ea4346f311b64aac2
-
SSDEEP
24576:kGShdSpUmxqy0GCJS58Vpl5/rwmLsyFo:FShdSp5fFmZrSGo
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 491724c1566ad28537f6e24d6bda9116_JaffaCakes118
Files
-
491724c1566ad28537f6e24d6bda9116_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 872KB - Virtual size:
Size: 884KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
Size: 875KB - Virtual size:
Size: - Virtual size: 875KB
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size: