Behavioral task
behavioral1
Sample
658601568fa3ca5c815c983e6c3590a3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
658601568fa3ca5c815c983e6c3590a3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
658601568fa3ca5c815c983e6c3590a3_JaffaCakes118
-
Size
602KB
-
MD5
658601568fa3ca5c815c983e6c3590a3
-
SHA1
6037dae1ae5453a26e57711a95d1b51ecb3516d2
-
SHA256
26ca37815bf82390a733ab93f2ded99ede6591cb5a1c742e233a542c4298fd18
-
SHA512
4947f3a0e2a30e3f3cb8887ba7edc9bfc54201b4a1d2d97cafff3bebe4b5760a23f0b3e237027cfacf4463ca64eaae88390ac167468db720baa63f701b403d68
-
SSDEEP
6144:V3i8X7pt4Oti0BWmKWIBtOcI9SSbA+cuXh9BM7x:V3TdtLW5WIj1YSSdFx9BS
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 658601568fa3ca5c815c983e6c3590a3_JaffaCakes118
Files
-
658601568fa3ca5c815c983e6c3590a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 193KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vc++ Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE