Behavioral task
behavioral1
Sample
842ca8e9a791648fd81a45ecf2ebca8e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
842ca8e9a791648fd81a45ecf2ebca8e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
842ca8e9a791648fd81a45ecf2ebca8e_JaffaCakes118
-
Size
160KB
-
MD5
842ca8e9a791648fd81a45ecf2ebca8e
-
SHA1
999ef086aad7944e3abc8b68a10ad252dfdd135e
-
SHA256
910549b4e66d3930c6119406634a023f6434a8a7fac30f535552ba4be5168ac7
-
SHA512
8e0a4e5aed5ab47a8dd92b42d82b0082f2813d068b1ca0d6453426f4885b5c44cc5e26117c1b93e7de2010d1ac128b330b83f6a78759e6196a0e581cdfb2046b
-
SSDEEP
3072:xkKmmSppJfw8wG7JAP7lKpur3OlTjdpeHudHYss3kSXH214dnVgcUSyUO:aTmSLK8f7JAP7lKpuSJxMvE+n2r
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 842ca8e9a791648fd81a45ecf2ebca8e_JaffaCakes118
Files
-
842ca8e9a791648fd81a45ecf2ebca8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
���� Size: 100KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�K�� Size: 42KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE