Behavioral task
behavioral1
Sample
70172c090397f52d39e5b69e2ba6ac08_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
70172c090397f52d39e5b69e2ba6ac08_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70172c090397f52d39e5b69e2ba6ac08_JaffaCakes118
-
Size
651KB
-
MD5
70172c090397f52d39e5b69e2ba6ac08
-
SHA1
59a3ce5ae61e4981f040c9f58a7e47c2ee0eb455
-
SHA256
7a2b3238fc544b7209ca6a2d07ad10442f3501fdf48f6d210de621a52f47efc7
-
SHA512
b96600f93606ffae8ca331a9480ee5a18afbf99a7d1ac404ad41df6c1b7c4b31d67f0633244bccb14897fdc2005a9fe4d0da5c9a36499bc82d80eaf75299289e
-
SSDEEP
12288:Ex9XWvu3eOn7PvU0JOJc6CKavkKtuyelj+YF3Z4mxxDdyb9AQpsC8qwLFuLks7ro:Ex9Xmu314JDijed+YQmXDkbGQpr8qwLz
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70172c090397f52d39e5b69e2ba6ac08_JaffaCakes118
Files
-
70172c090397f52d39e5b69e2ba6ac08_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 21KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 298KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.date Size: 330KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE