Behavioral task
behavioral1
Sample
67660b3eb0ad88c7dd8ba39a18deda20_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67660b3eb0ad88c7dd8ba39a18deda20_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67660b3eb0ad88c7dd8ba39a18deda20_JaffaCakes118
-
Size
122KB
-
MD5
67660b3eb0ad88c7dd8ba39a18deda20
-
SHA1
02c6d5c68ce8b1424eab00b74eda1b74c26e9b89
-
SHA256
951b57237b655132dd09ee29dd5141428fc187b03007026ff5448caa5e4966e8
-
SHA512
b799d1f698c638cb6d6ae768829d5ba9806e6710b5d38e3b8d539e0155709a141b5dbe157869ea2ea43ae7766a08fbb4d1f4e8b824a23ab9c2aa4a7b908021cd
-
SSDEEP
3072:KMIRn8CySTkPJLpEqaVf6cE8HcZvILjH+pEMIRnH:vCkBLDaVf6Z8H8vI9
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67660b3eb0ad88c7dd8ba39a18deda20_JaffaCakes118
Files
-
67660b3eb0ad88c7dd8ba39a18deda20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 276B - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE