Behavioral task
behavioral1
Sample
b1220cb546e0ba77fc01edff2c113e84_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b1220cb546e0ba77fc01edff2c113e84_JaffaCakes118
-
Size
7KB
-
MD5
b1220cb546e0ba77fc01edff2c113e84
-
SHA1
34479ec55f681c59c04a3ea2c73323498ed1c0dc
-
SHA256
2c2059b50fe1f96990c8d13a29c27b2f7ffd3c8b2fc5394dee769f0810730038
-
SHA512
c1f49814efdcc1bee20d32eb8beceeefcc99980b5201f23f19927959a545df4551107ec4d79055abec305acd3ac10c01e753d5149cf7289d70e2405ee6515159
-
SSDEEP
192:/TBynsvaVmQpPPuVAx4wCMrpY7e8LqPZo5LdCfq1Rn6O3QBw:/TBisvaqAx4r6+e9Pfqbn1QK
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1220cb546e0ba77fc01edff2c113e84_JaffaCakes118
Files
-
b1220cb546e0ba77fc01edff2c113e84_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
amd0 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
amd2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shield Size: 30B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 17B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SVKP Size: 55B - Virtual size: 55B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ