Behavioral task
behavioral1
Sample
78fff3ac55f778b65c32dafb3e1d289d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
78fff3ac55f778b65c32dafb3e1d289d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
78fff3ac55f778b65c32dafb3e1d289d_JaffaCakes118
-
Size
14KB
-
MD5
78fff3ac55f778b65c32dafb3e1d289d
-
SHA1
277b8df19fcea70c7d32253146fcf188c0ea08e5
-
SHA256
5655e5cfc52a11e882580072774ffe1d5132b59623b95be6a2d2a67a52822c7e
-
SHA512
97b7c706ae5eaeb3c48c015a5dd88b202105ab588e453a05976a59bcac04d62f6396c792a79c2e37f60855f48a593cf290c664d180de5b8029ab8d4431300a48
-
SSDEEP
384:Cpc7N/jyrgO1YaurDAxvr6+S9Pfu7n5Q7IPq3qS:qcdjiPKaurUx+deVQ7Is
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78fff3ac55f778b65c32dafb3e1d289d_JaffaCakes118
Files
-
78fff3ac55f778b65c32dafb3e1d289d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE