Behavioral task
behavioral1
Sample
96df7cef25c75ef4b7e1c9304c7ee768_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
96df7cef25c75ef4b7e1c9304c7ee768_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96df7cef25c75ef4b7e1c9304c7ee768_JaffaCakes118
-
Size
1.1MB
-
MD5
96df7cef25c75ef4b7e1c9304c7ee768
-
SHA1
5647cc277e57ea8e35ae9a6e5e85b09b0ee5d5b3
-
SHA256
5f3a216003b853d8e56910676321ef0393f6a288dff302eeb2ef1ceb988e5105
-
SHA512
fca8f4dc0ffec2c44ddbce004b5410d0b54a561d0ed68974802002b58cd2898b09298f56643480d41a5520d0fb858ae9809636a48f41a6d88ae6520fbc75a6c2
-
SSDEEP
24576:ys89QPqS+30UC2tifg7YvA3tmqgZm8+hlZuwxN9dNX8CBah24YNJwV9j:yZTS+30UxsXMwqnfhfuwxfShFY0x
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96df7cef25c75ef4b7e1c9304c7ee768_JaffaCakes118
Files
-
96df7cef25c75ef4b7e1c9304c7ee768_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: 198KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 120B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE