Behavioral task
behavioral1
Sample
a010ce90e885c500df472f9326a7af0c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a010ce90e885c500df472f9326a7af0c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a010ce90e885c500df472f9326a7af0c_JaffaCakes118
-
Size
106KB
-
MD5
a010ce90e885c500df472f9326a7af0c
-
SHA1
99004f8ad820762b6882df99ef22dc839c1f85c4
-
SHA256
08c628ddb114913330bdef87cd16975c701519bc338348111ed2ed124e999098
-
SHA512
2a023bf6b223e6f013db274644b8d71767dccce6098fd3a393110f8bda03a2e816fa8b78d564c6e2229a68ed7a7fcb56f8a59c00b38b3a8a77505c3ac2215dc0
-
SSDEEP
1536:tUxap/CbB162ZhILjQyRvKs2dRWIY/F55MC2pax15tH3gLGWhmsZ:tUm/UBw2ZhI/Qqf6R+baC2815hiz
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a010ce90e885c500df472f9326a7af0c_JaffaCakes118
Files
-
a010ce90e885c500df472f9326a7af0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 69KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE