Behavioral task
behavioral1
Sample
764610e5ec4fe3f6575d3121cc6aa1d1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
764610e5ec4fe3f6575d3121cc6aa1d1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
764610e5ec4fe3f6575d3121cc6aa1d1_JaffaCakes118
-
Size
15KB
-
MD5
764610e5ec4fe3f6575d3121cc6aa1d1
-
SHA1
75276ef517a79fd29b7f77d70a8e60cfa8bafc99
-
SHA256
f79b962063c0b1f6bcace37f1b5caf27c2482a7232b2825ee3f3cda5d8c006bc
-
SHA512
31e3f86d2885a3e5541b3122aae4ef9f70624d13d89067a944eb9a8e9a2a3472ceb7e64cbec859f554fed637bb8efdd0ae0d464c749d160a6e0b6c08e5b40058
-
SSDEEP
384:fiM7U9qP1FGBGSudU81VC9z4lr323Ax3r6+S9Pfu7n5LWiG+8:nY9c0udF1VCMXx2deVuT
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 764610e5ec4fe3f6575d3121cc6aa1d1_JaffaCakes118
Files
-
764610e5ec4fe3f6575d3121cc6aa1d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE