Behavioral task
behavioral1
Sample
5c9970b4866655b91ffbb48382b0a548_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5c9970b4866655b91ffbb48382b0a548_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c9970b4866655b91ffbb48382b0a548_JaffaCakes118
-
Size
220KB
-
MD5
5c9970b4866655b91ffbb48382b0a548
-
SHA1
a30e275afcb1c884255cb82136b0c1f5638087f8
-
SHA256
c353f55f0b032c8c68c637445e7a2f8a28a3c967dd41dbec53d875c33c172824
-
SHA512
6d6e0b16c6f492ae3381cc13de9c939792bfef8a431095f81194453163cfa3f530bd04d29aa6cf65d082f693b094f50b14aa97f8391e1919e03ae02078ae55f4
-
SSDEEP
6144:D4qkTC3il6RiFHKXLfTMmApe7RZPd/5pfWv:D4qkTqOHULrMmA6RrvOv
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c9970b4866655b91ffbb48382b0a548_JaffaCakes118
Files
-
5c9970b4866655b91ffbb48382b0a548_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 924KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 219KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE