Behavioral task
behavioral1
Sample
647a4e5a4ce4ee90e73cedf0fcf2dda1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
647a4e5a4ce4ee90e73cedf0fcf2dda1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
647a4e5a4ce4ee90e73cedf0fcf2dda1_JaffaCakes118
-
Size
746KB
-
MD5
647a4e5a4ce4ee90e73cedf0fcf2dda1
-
SHA1
d95d934a1c62bedc628e5fbc89813cd83357f9a4
-
SHA256
40040c2d7712af2c5e6c87d103f4400e3b16afdf1987f640846330f217ef508b
-
SHA512
56103492a7de4f5f1110f2970c4ff1ee13a9547684a9cb34e456b3c5d267ad52c4f22bc974c45ce330de19b68333e0e4a9389c2c8d6a1dcd94457f90d4564ac0
-
SSDEEP
12288:sRz4euK+9HVlLhJ9duMc+l3DoVWREsA5DC1vkt+hvvQTme4rgMXmX8ubUnHyXj7P:yseYVHfnkVLsswktgHQ7sgsA8ubUSXFV
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 647a4e5a4ce4ee90e73cedf0fcf2dda1_JaffaCakes118
Files
-
647a4e5a4ce4ee90e73cedf0fcf2dda1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 109KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 343KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alloy32 Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alloy32 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alloy32 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alloy32 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE