Behavioral task
behavioral1
Sample
a427cfcd762c02cf73b20f176a0ed056_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a427cfcd762c02cf73b20f176a0ed056_JaffaCakes118
-
Size
15KB
-
MD5
a427cfcd762c02cf73b20f176a0ed056
-
SHA1
eb984ecd642d3b8b0ae728d8af9c846a99ac1912
-
SHA256
9011054b50cb35283fd533c75c96fc8f020360df9b610ec623030b70054aa4e0
-
SHA512
58774fcd3382a5dab6c8414ba627fb3753ce8e0e49d116b25851a9650dfe1b022e7f808a0c4152b95e4463911fc5454b18149536f9ba88c08be88664e7507a8f
-
SSDEEP
384:C/KGVr4OD5vmRj0IW8w5Axpr6+e9Pfqbn1Z:C/KGVTD20Mxkha5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a427cfcd762c02cf73b20f176a0ed056_JaffaCakes118
Files
-
a427cfcd762c02cf73b20f176a0ed056_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE