Behavioral task
behavioral1
Sample
a0691a45da0d004eaa78026161947400_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a0691a45da0d004eaa78026161947400_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0691a45da0d004eaa78026161947400_JaffaCakes118
-
Size
38KB
-
MD5
a0691a45da0d004eaa78026161947400
-
SHA1
ecd9c413aef68d7a3283770891575f6f0984548c
-
SHA256
1800b086b13a94c2826390c93fda94b479bd3548f43d75d251bbfab1ce9ea161
-
SHA512
1e4520fc42386f6abb74902f69dc24b76e9823bfa23fc2b73be5743d4cbc069fafb063b4f7a1e3908b75ba2e666ae902fe444649de8259f19c3d84cedb7c0b85
-
SSDEEP
768:7j48Z5GVzE4s+/fWG9990MUku8j2eXmz6gjXSHYf8vrq5exGdeV:7kAczE4s+mG999/U0j2MgjXe68D2
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0691a45da0d004eaa78026161947400_JaffaCakes118
Files
-
a0691a45da0d004eaa78026161947400_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE