Behavioral task
behavioral1
Sample
5e23018939c2d61f61b18303aa0eb08d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
5e23018939c2d61f61b18303aa0eb08d_JaffaCakes118
-
Size
472KB
-
MD5
5e23018939c2d61f61b18303aa0eb08d
-
SHA1
b5c07fa763cf29431ba14021827d9e48ca5603a6
-
SHA256
8b62e2abdbd4757c91c9469e2ef5e8450f2b48b7bb54687fe375cdcc0b45bee4
-
SHA512
dfa0fbf8581a249062ec870dcf194c393de121231b6f4f9b3448a0306fd4479f026d1dc39f51a333c64d78af1669e0954acc869e3e7e780b41128c6c29259dac
-
SSDEEP
12288:IF2DbVRx2a4+bhVj05eZtfK3QGlMiaTAo0p3QFcMaCi:IFmTLrj6eZBK3TlMi2APCFcMa
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e23018939c2d61f61b18303aa0eb08d_JaffaCakes118
Files
-
5e23018939c2d61f61b18303aa0eb08d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 381KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE