Behavioral task
behavioral1
Sample
5f7fb9af49b5317bea1b7309637a80a3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5f7fb9af49b5317bea1b7309637a80a3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f7fb9af49b5317bea1b7309637a80a3_JaffaCakes118
-
Size
61KB
-
MD5
5f7fb9af49b5317bea1b7309637a80a3
-
SHA1
c2c6db74ee7547745e4808d71cfe934c4236ef2e
-
SHA256
44a706efd063c1b354f5d279935721aa6268472ce1140f21a3ce27b4f4e5224b
-
SHA512
caa0e186a9ef9ce7cf8419d269b712d704878158907153201c5ed25afe2bc4ed635006d648c94fca31c1ee362dd530bc5eedc7066f164450a7ce4e72b676e7ed
-
SSDEEP
1536:UWtP8qA75e1LlHrfgAcBURUB/HaNeP79vt8gT0RJY:nED1e1BHUFBMUB/Ht8gM
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f7fb9af49b5317bea1b7309637a80a3_JaffaCakes118
Files
-
5f7fb9af49b5317bea1b7309637a80a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE