Behavioral task
behavioral1
Sample
89e92f5ca43675c488d30256489b88e4_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
89e92f5ca43675c488d30256489b88e4_JaffaCakes118
-
Size
370KB
-
MD5
89e92f5ca43675c488d30256489b88e4
-
SHA1
c77060f98090e03374ba2ac6f50efd841af48b4f
-
SHA256
d0cf573c7ea06e075e6d3e99e9d0f3fb32a3f52632f9fedfc812fd741114d1f5
-
SHA512
4dedba44071d6712fc45b73789c59b57dc1a88f9f388b6b1738c26c3d03f3029839aed6688f13b3c13f7c08708aed6066cc12efffd916f11caa5a0a4f9eb97e2
-
SSDEEP
6144:kdflYiyV2Cv7uDcROFRLN2Onxl3GNHOe6bm77kcj5mgRGAR1ZazTap5lTfSGYEZ:kdtY3dTEcROjx3GFbt3kcvR1MypffSG5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89e92f5ca43675c488d30256489b88e4_JaffaCakes118
Files
-
89e92f5ca43675c488d30256489b88e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
hmimys Size: - Virtual size: 828KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: 362KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE