Behavioral task
behavioral1
Sample
a89ed76b1c634e44abfc68c1208b989b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a89ed76b1c634e44abfc68c1208b989b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a89ed76b1c634e44abfc68c1208b989b_JaffaCakes118
-
Size
143KB
-
MD5
a89ed76b1c634e44abfc68c1208b989b
-
SHA1
c3ace3997f4e631a3b88096af1f7f892ba08cf40
-
SHA256
4d45530d618550c7b60e80a74cd6c5c9dac639fa345d6360954b0eb110cb3d34
-
SHA512
5761defcf12a863a285e752bfa02a5697e7f49fcd02d9852ce2c165fec63841e3e2c6c6853df3b886cd6a5cbd7e6500623005ce686e1e36f5205d7d61532e132
-
SSDEEP
3072:yVo89pso6tOCGB/A3zKOpwaPJf1tb2XwsSmNj3pKE7XwX:uoewOCGB4eK5owWNj3pVDQ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a89ed76b1c634e44abfc68c1208b989b_JaffaCakes118
Files
-
a89ed76b1c634e44abfc68c1208b989b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 94KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE