Behavioral task
behavioral1
Sample
6342700f2f97542023ba1f50e7c39c5f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6342700f2f97542023ba1f50e7c39c5f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6342700f2f97542023ba1f50e7c39c5f_JaffaCakes118
-
Size
104KB
-
MD5
6342700f2f97542023ba1f50e7c39c5f
-
SHA1
eade28b5c89057bb231367f85beea80211a8091c
-
SHA256
d7afa16825f6f132a120e50620e38fd92a37572dcdaf5ee816c64952c23ba51d
-
SHA512
8ecf47282e5ea0820be14dd07f991c7dd40434b3b4000bd9c9cdb6de2974eb44f6df57a3589ae226701b18124945e366e8af4fcad6a0bed516484a5d8ce0ffe1
-
SSDEEP
3072:5F3jyhxEvWp6UoT/AQma4FM+z99iQB45teh2gcko:5Zsx6WvgAQJ4y+zPBMg25
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6342700f2f97542023ba1f50e7c39c5f_JaffaCakes118
Files
-
6342700f2f97542023ba1f50e7c39c5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 95KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE