Behavioral task
behavioral1
Sample
a5d095853c79795213a24da3cc89be61_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a5d095853c79795213a24da3cc89be61_JaffaCakes118
-
Size
46KB
-
MD5
a5d095853c79795213a24da3cc89be61
-
SHA1
797e10aa075566a0334d2816110518e07ace8cbe
-
SHA256
d96f33c6b0edbd2ced4b58ec834a7352ba094c6f0f0f61a2d0cedb60abcd3af5
-
SHA512
1142086471dce4f8988381aee9a100778a5a8014ab00d5acbcc5330b5af5a991b49d141d7e46dc04ebb93cb895170f368b83e9894ac7d717ec93a7e7c26a35b7
-
SSDEEP
768:TiBJq4uivBeErbJGoK1x52Tai6UDmAeh7QyUbQL6R085939KosXqn7xmha5:Tiq4uiZJVxK52+oDxe2yUbQLm0w9tC6E
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5d095853c79795213a24da3cc89be61_JaffaCakes118
Files
-
a5d095853c79795213a24da3cc89be61_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE