Behavioral task
behavioral1
Sample
96f3e59ab046b7e1aa5c318e004da94d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
96f3e59ab046b7e1aa5c318e004da94d_JaffaCakes118
-
Size
848KB
-
MD5
96f3e59ab046b7e1aa5c318e004da94d
-
SHA1
2daf7ad32dddfbf1d0f36514b9859dabb887aa22
-
SHA256
1905579623b283fe5ee49cd59a66134b71429e6f4476ba79ff8c47ddea6d210d
-
SHA512
ccbe82df81fe7baee2d85fd09e9201e83f26ca2e04a6d77524c0b28480bcbede5e637590834b9270ab51d2a6b453b19326900239831679522c2e119325a07358
-
SSDEEP
12288:sRmpK8xf+yk+ElPpALJGndSEEpMR3NNn:sRz5nPpAmREiR3NNn
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96f3e59ab046b7e1aa5c318e004da94d_JaffaCakes118
Files
-
96f3e59ab046b7e1aa5c318e004da94d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
W{^0 Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
W{^1 Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
W{^2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE