Behavioral task
behavioral1
Sample
949b491cc9ebeaab3b9263de882cfb40_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
949b491cc9ebeaab3b9263de882cfb40_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
949b491cc9ebeaab3b9263de882cfb40_JaffaCakes118
-
Size
503KB
-
MD5
949b491cc9ebeaab3b9263de882cfb40
-
SHA1
a7d2626eb37ac05bdaa825fd5b5d91e2286c4d44
-
SHA256
a2354017a30d2d10f14b51ae1fc1d7099e44e2b490b4a5e6b2a39f2eb3779668
-
SHA512
06090c1e848e52ece7a9365ea086d20b3b97e943b9aa3a28cc564c19e09ba8176aa6734fbaef8bcb482f29c4d29521a76b5f4f45f38066a5c33c72f169674185
-
SSDEEP
12288:f1Ejc0g666ux8WmCgIN0v0tpRsbQ5QFW1meyUGp8I79y:feov1m3Ii0tpRsbQ5QFW1HGaIRy
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 949b491cc9ebeaab3b9263de882cfb40_JaffaCakes118
Files
-
949b491cc9ebeaab3b9263de882cfb40_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 182KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 212KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE