Behavioral task
behavioral1
Sample
8da4d49afd00502223bf4d97e10851f8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8da4d49afd00502223bf4d97e10851f8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8da4d49afd00502223bf4d97e10851f8_JaffaCakes118
-
Size
16KB
-
MD5
8da4d49afd00502223bf4d97e10851f8
-
SHA1
6c5a57d7861a3630d9e8957b82127ca489380526
-
SHA256
611c5a502947b75baa9b377ff37217e5c804269335dec72cd4ee863637b442fc
-
SHA512
ddb005812e5fb8e466d8dcf8433549d6ffeb58b7afab663058c1aa61050bb73a55489c001863d442a46f691ab426bd82219ca8dc6469dc31da1ad4e8751adb00
-
SSDEEP
384:Bj37cm9qSCIdpwgT2VAx/r6+e9Pfqbn1GHGDp:Bjrcm0SCfgT3xuha5OGD
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8da4d49afd00502223bf4d97e10851f8_JaffaCakes118
Files
-
8da4d49afd00502223bf4d97e10851f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE