Behavioral task
behavioral1
Sample
628a53bda2236f8229fe960ad3f55f47_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
628a53bda2236f8229fe960ad3f55f47_JaffaCakes118
-
Size
185KB
-
MD5
628a53bda2236f8229fe960ad3f55f47
-
SHA1
4acad09f08133086c5dc4e28b4fee670b3e6ae20
-
SHA256
0f91d4f858bfb690b7ecb631ed421b8c7766dbf609d66dc774d20cef29b2ff0a
-
SHA512
2d2bce2e264e3a7e06f9d2449438713072f15bbab1b8709a41c712caac9b47e98d2b7214f11f34d6262ec3519ba3157d1beead6e4dd96586583d0e33c60fe5ef
-
SSDEEP
3072:dJtoRCylXDtcaTvSn/zankjgbpn2eDX6qSszZgDspDP4e0Zptq37Tyj/dtg:2XDuaen/zat1TDqq5ldpPMGY/d2
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 628a53bda2236f8229fe960ad3f55f47_JaffaCakes118
Files
-
628a53bda2236f8229fe960ad3f55f47_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
fdhytrxh Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fgo�rxh Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yyodyjtr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdyer Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yt856 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE