Behavioral task
behavioral1
Sample
4da5bf611198d1cbaf30928c9cdecb77_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4da5bf611198d1cbaf30928c9cdecb77_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4da5bf611198d1cbaf30928c9cdecb77_JaffaCakes118
-
Size
63KB
-
MD5
4da5bf611198d1cbaf30928c9cdecb77
-
SHA1
9dbd4a69bd5154e9143ae16477b66014e752428b
-
SHA256
c543ebc24df687316cee1acd43ba3ff77db061344e7b5fd442e79177d92a334b
-
SHA512
cc39ea2159dcc7c648f33192970c47448d956721175bba8badedef55b9596ef05ea53de3d131d5000b40eaf18ebe4290240d65eadd3397dde1a7b6b858943f05
-
SSDEEP
1536:zPswxZPp6aPe28p5nlMV3bloPeI25Tf9u8rk:fp6w8367o8Zf08A
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4da5bf611198d1cbaf30928c9cdecb77_JaffaCakes118
Files
-
4da5bf611198d1cbaf30928c9cdecb77_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BITARTS Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BITARTS Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ASPACK Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aDATA Size: 394B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE