Behavioral task
behavioral1
Sample
69c247252d4203cd1ae63ecc9ecb3693_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69c247252d4203cd1ae63ecc9ecb3693_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69c247252d4203cd1ae63ecc9ecb3693_JaffaCakes118
-
Size
178KB
-
MD5
69c247252d4203cd1ae63ecc9ecb3693
-
SHA1
ce321b35a444ed27657b47bb6010ccc149788b84
-
SHA256
4c7ac68806c296103f581531b1d62cdd7e0871d3978f1b6cfcf237f30c3290ee
-
SHA512
03d680d3f888ed3bf8cbff941a9ae8bb6c8eb6e5877f1b1cd10ddc6892d711388a40bc15aa8ef6811027b1e199b80a4d75c66bae60bb6ea540e59ea506af3517
-
SSDEEP
3072:MLscVNefcOBLLI9h8yY1coMFOP15ePy4u2v2NbSxk+ijc/XsmRWBBBJYCiYqDDzD:EhVYXg8L12Y1URuSgSxB/seCXRiY6z
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69c247252d4203cd1ae63ecc9ecb3693_JaffaCakes118
Files
-
69c247252d4203cd1ae63ecc9ecb3693_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 133KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE