Behavioral task
behavioral1
Sample
65d05d113b09f2d03a4df4b4f3462875_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
65d05d113b09f2d03a4df4b4f3462875_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65d05d113b09f2d03a4df4b4f3462875_JaffaCakes118
-
Size
742KB
-
MD5
65d05d113b09f2d03a4df4b4f3462875
-
SHA1
9e74afc2273cf38cf8bb08a9ecd3a23c2b3e998a
-
SHA256
1514cef89972d37daa4c2a2732ee7ca30842a1cb449d62a90e5100d0a81fddbf
-
SHA512
6ad8c4eb19b9c4454da74c6b38661deac3486552e8806964a0c5f0c97a1511659b5ddd6d84bdc8ffd838e39915e46e740333631f3992d33a643f889f486b3d9d
-
SSDEEP
12288:AN/Wyrs6ZSmPUlbwFoXoKcbPfymSJS1cP9VQscSaZVuwHNAFiwkX7v6gDU7J5:AxnrNNPsyoXoH2lVQskVFtxwkX79w7J
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65d05d113b09f2d03a4df4b4f3462875_JaffaCakes118
Files
-
65d05d113b09f2d03a4df4b4f3462875_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 663KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE