Behavioral task
behavioral1
Sample
b1254a8298d0caa0edd3f160d71f40b2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b1254a8298d0caa0edd3f160d71f40b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1254a8298d0caa0edd3f160d71f40b2_JaffaCakes118
-
Size
112KB
-
MD5
b1254a8298d0caa0edd3f160d71f40b2
-
SHA1
68b38c04c358f6325e02160730ead888781e0e53
-
SHA256
1cd4bbed320eb08c56daf3c0eec7a06c6997e78f1144979c5648bdf4ebd09ecc
-
SHA512
e9bca445a0c7b1df5ed893e1a023ec25bcadfef0ec5c0565a9069e53e7dac253e4fb33745ccfedcd910ac4ee25e995c67aad4fe819690d7a21a62b42ab151ee0
-
SSDEEP
3072:iQdz/ERyka/5oGD+lG5Bmwc6P3AMt0rn8g/pGL/e:iwtRo8+lG54wFwMtkn8gML/e
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1254a8298d0caa0edd3f160d71f40b2_JaffaCakes118
Files
-
b1254a8298d0caa0edd3f160d71f40b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 109KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE