Behavioral task
behavioral1
Sample
a0a111e36a3444b3b7768326a9855691_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0a111e36a3444b3b7768326a9855691_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0a111e36a3444b3b7768326a9855691_JaffaCakes118
-
Size
172KB
-
MD5
a0a111e36a3444b3b7768326a9855691
-
SHA1
727523af54738211203de2dcd593f3027da04d8d
-
SHA256
b72dc909cdf8bda4993e5213ad2e0726c9d3e20c2d4942fd9e41be93a23a14e4
-
SHA512
4394841d10248404d4b7a7f4bc5a6d3cbd0a7c010b20406c2376814ceddb48a7ccd5f920a3531fb4705ce39bdd1c63c2ec55779d5da08b1b98dc4c38bb33d34b
-
SSDEEP
3072:auEIicdTbyCOI0DLmrTg4S7r8CgaH+atgF+lgdsIjgoenk:fLh5y/sTjUrjzfttlgyIsoek
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0a111e36a3444b3b7768326a9855691_JaffaCakes118
Files
-
a0a111e36a3444b3b7768326a9855691_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 128KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE