Behavioral task
behavioral1
Sample
ac46e4a688d58b5be9a27a016ad6f56e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac46e4a688d58b5be9a27a016ad6f56e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac46e4a688d58b5be9a27a016ad6f56e_JaffaCakes118
-
Size
141KB
-
MD5
ac46e4a688d58b5be9a27a016ad6f56e
-
SHA1
0e54a9e1c1103f148c6afd0035c8835e2e4d31a2
-
SHA256
3403bc4e213c4ee33f0d6cde698daa1454e3927cb58807049c500595a0981851
-
SHA512
9b478e78e845cdd5f96536cd32600c18707ed9db394916ffb5564d44f771526e9110476d5dd038fe6f463faa06a9c22bd316e0ae6e29df13736566d6671e3881
-
SSDEEP
1536:bWX5quD9MYAbkMTOI9d9SJPKaVJH/u3hwRxJMBwgrL11lBnwTEuD6P3R3u3pLDlG:bWX9DObUSSZKhcMbVBwTEuOPhe9Ick3
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac46e4a688d58b5be9a27a016ad6f56e_JaffaCakes118
Files
-
ac46e4a688d58b5be9a27a016ad6f56e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE