Behavioral task
behavioral1
Sample
a721edeb51e1b7717c5f89b8e2712b30_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a721edeb51e1b7717c5f89b8e2712b30_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a721edeb51e1b7717c5f89b8e2712b30_JaffaCakes118
-
Size
1.0MB
-
MD5
a721edeb51e1b7717c5f89b8e2712b30
-
SHA1
7dd938c20ae75a3c640b611bf0b84db7622ba93e
-
SHA256
a7a6c593b8c58ca19ac8ac0806ea0b45d68d2c7d24d52377fce75cdb83df56bb
-
SHA512
3ccfb4c61398ed0fd517dbe1ccdbc225bc4c191de65180658b6a6061db5c8a1380808c468ef4aa3391e48c8d93f886c209548111f79c8843b0e2a9ab9f4ecbc4
-
SSDEEP
24576:E12y77sFvLsgr8BTK4inr6STsEBZWqzqJY1V0RqJS+4Ld:sGTsgr8BZinr6EfhzVt4Z
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a721edeb51e1b7717c5f89b8e2712b30_JaffaCakes118
Files
-
a721edeb51e1b7717c5f89b8e2712b30_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1012KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE