Behavioral task
behavioral1
Sample
8741b9f4b8e1ad41ae87a7e679dd73c7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8741b9f4b8e1ad41ae87a7e679dd73c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8741b9f4b8e1ad41ae87a7e679dd73c7_JaffaCakes118
-
Size
297KB
-
MD5
8741b9f4b8e1ad41ae87a7e679dd73c7
-
SHA1
d3a58cb8a572cd6df9772f3d79a1a3aa0172aaf3
-
SHA256
84d094d29fe1754892627d0f98202caa5e5bf1cba7f643d2f9e836d91415736f
-
SHA512
6655a2f5b2327bf91d6ebacfc36cb5204cd729a5fa642e3ea016975f0580a92604e67b99c698e1d4c75963019033110d7ec5463237680738570d28bd50da5526
-
SSDEEP
6144:hO02reWhgLPU/Yw/EwParnGMh2X9uYoonKxV/rI7c90BJLEa:hO1yW6jQFCiFoonyIQ0L
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8741b9f4b8e1ad41ae87a7e679dd73c7_JaffaCakes118
Files
-
8741b9f4b8e1ad41ae87a7e679dd73c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 246KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE