Behavioral task
behavioral1
Sample
748923ed25dc37beb2d23d9c9378b6eb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
748923ed25dc37beb2d23d9c9378b6eb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
748923ed25dc37beb2d23d9c9378b6eb_JaffaCakes118
-
Size
141KB
-
MD5
748923ed25dc37beb2d23d9c9378b6eb
-
SHA1
86f5bc5a91e26e2a172c507564c168124afabaaf
-
SHA256
c30d2aa4a57e31b6bdae7ad7614f6e237d3ffae8dd7c3d46d7d35a9db6287d44
-
SHA512
355fd4e7898b83f3f48d5afd93604b7a17335b1789931835d4097082b110c1604c542efcff0990033f582e3c83d955a00b14f698dd36186a38b7f781d666f671
-
SSDEEP
3072:BdqyGxWNZA7jpzx7iWFeYI9vOX/vS6fmRs/VcuvsCROb:LdZA5FeWF69GX/ZfmyXsW
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 748923ed25dc37beb2d23d9c9378b6eb_JaffaCakes118
Files
-
748923ed25dc37beb2d23d9c9378b6eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE