Behavioral task
behavioral1
Sample
b19f1243fe4f42b2cdae975ab2048687_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b19f1243fe4f42b2cdae975ab2048687_JaffaCakes118
-
Size
13KB
-
MD5
b19f1243fe4f42b2cdae975ab2048687
-
SHA1
d8cebc1a98a406e0c2450b91f351153388784b58
-
SHA256
8873d3a05378f22ee8fb771b2a2867b485e3d44686cc71e6daec9c7e4dcf1868
-
SHA512
48dd05e336b6feb38aaf0481fad179e9141a6f6164b7f403efe3308f6e24c06937ee2e1a48ffc158cfff65335009970a4f09df8e748acd509c1b9e952dc43769
-
SSDEEP
384:e8F6HsLHrcTsZVz+Gz+AxLr6+S9Pfu7n5:e88s/cTUz71xydeV
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b19f1243fe4f42b2cdae975ab2048687_JaffaCakes118
Files
-
b19f1243fe4f42b2cdae975ab2048687_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE