Behavioral task
behavioral1
Sample
960e357d84ac5a7d4a16ea85ed2dc3cc_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
960e357d84ac5a7d4a16ea85ed2dc3cc_JaffaCakes118
-
Size
88KB
-
MD5
960e357d84ac5a7d4a16ea85ed2dc3cc
-
SHA1
2d756c3283fa8ed90c415ff606721b096cfb45ac
-
SHA256
10562676ccd72e98232b5bf090094faa05a4a31d31a7b9ed64e39d4be661ff82
-
SHA512
47fa22cad2ead5e06a7610c8fdee320c2693865a3b0a749b5d865e2cf4ca78884fabb4b84850792fdeda549fad19b4fb9334f196d684256207f0c517437b8485
-
SSDEEP
1536:80QE/nI/P4C/ouBdRTXD5GVsmRgurQBx8hCT8I8Jk5EymD+iJQMy4/D1Ej3w5:Rf/nuP4u5BdlXD5ygoQBx7QrJEmpJQMX
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 960e357d84ac5a7d4a16ea85ed2dc3cc_JaffaCakes118
Files
-
960e357d84ac5a7d4a16ea85ed2dc3cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 38KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE