Behavioral task
behavioral1
Sample
95651fca939627a35085655b0b615888_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
95651fca939627a35085655b0b615888_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95651fca939627a35085655b0b615888_JaffaCakes118
-
Size
230KB
-
MD5
95651fca939627a35085655b0b615888
-
SHA1
a920a91eb7bb99142e8cfcc2b694a6489c762f0d
-
SHA256
ed567291ea571b6fb72d9f8f00eca864e5816790741bea1d67807dc49f338b20
-
SHA512
cb1a4d6cee84e527f6153872e92d118c86dae7688f5492900768daef2ecc66474918ce8ee2caac45a09be6c800a74950eaaf7d0b88533bc296e5fa53020b8618
-
SSDEEP
3072:tA5l8g5HY+JsQ1c/B+zZtOjniLUzi0UyH1oARklFdPrInJaH57dmgq153HDCE+hI:tClHq+JsQ1uiyigHlojoaH5wgs5zt+Z
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95651fca939627a35085655b0b615888_JaffaCakes118
Files
-
95651fca939627a35085655b0b615888_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 222KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE