Behavioral task
behavioral1
Sample
888624ade64933bcdd32460db0e52631_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
888624ade64933bcdd32460db0e52631_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
888624ade64933bcdd32460db0e52631_JaffaCakes118
-
Size
310KB
-
MD5
888624ade64933bcdd32460db0e52631
-
SHA1
a9d8189e55d14edd4b9e48a440d762b518083e39
-
SHA256
77031d85c4d313980c9b792a9e804c6cee3cdd92395e2efa2a02acaf3858eec2
-
SHA512
fe36fd974917db3c2284d38fc7c0b5ebae04fdd8dc977710163ada5938506be6a83d141917becd0e6144efaa0251a8fad4783245ecad18d4c5455e7ab632ca38
-
SSDEEP
6144:GoRzF+q+/vSAad1pLbrn4MeV2A9JVbBdsxrqZ5Pgv63yG7CL8VZFeS9:punXadTbbO2c9jSCPgv90CAVZF
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 888624ade64933bcdd32460db0e52631_JaffaCakes118
Files
-
888624ade64933bcdd32460db0e52631_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 244KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE