Behavioral task
behavioral1
Sample
ab08d34866f95ac413c473d42d2c0cf7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab08d34866f95ac413c473d42d2c0cf7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab08d34866f95ac413c473d42d2c0cf7_JaffaCakes118
-
Size
3.8MB
-
MD5
ab08d34866f95ac413c473d42d2c0cf7
-
SHA1
1d1aa2f68966e971db52143389d4ea83b346e8ad
-
SHA256
e2d81909cea1dcc5b7919f7448413b1cefa09acbb3edf48a10cfee1e827a2b00
-
SHA512
ce2bed978c8721b4ed6ca51434c2dd1ce7beb6eb162c705a585205a20718c16f73fe03367f394c2cc60bbd5a05e69fc79719683c43ef5e8d7ac03361e65087e6
-
SSDEEP
24576:uIrv1Xsav01ZmAjYm5NiHabHigrIQBDRe+PugJt1WpKAni6f82by1UBE3IKl9Zcj:L1XD2vNjpRypZwFWV1+Pez4yVT
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab08d34866f95ac413c473d42d2c0cf7_JaffaCakes118
Files
-
ab08d34866f95ac413c473d42d2c0cf7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 444KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE