Behavioral task
behavioral1
Sample
68bffb88ddad6ef29c8fbde668579262_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68bffb88ddad6ef29c8fbde668579262_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68bffb88ddad6ef29c8fbde668579262_JaffaCakes118
-
Size
298KB
-
MD5
68bffb88ddad6ef29c8fbde668579262
-
SHA1
c304c8d7aed79e86ca15d6e6c301ecc151bc6851
-
SHA256
492154991f2c8a1f6ccdf0a237fbe3a895b220ba152ac5a49f3c3d9ec8d5f357
-
SHA512
073e1ef3bb034e2bb26d5dfe994a8222ed861e3c64ba063e87bd487ee5a1b78bd3929eeccee0309139bb6fd5e6f1c34b8be447706dd5615c76ed25838040432b
-
SSDEEP
6144:w1QsS69Pqvx0rSHzdsZAi25bdDxXHZlxCMYbwXiy6UCX8nq1W:w1QsLKPHxb15HZlxDXi4CX
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68bffb88ddad6ef29c8fbde668579262_JaffaCakes118
Files
-
68bffb88ddad6ef29c8fbde668579262_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 294KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE