Behavioral task
behavioral1
Sample
b1f1545c825bc1657d440464b6aacf5f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b1f1545c825bc1657d440464b6aacf5f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1f1545c825bc1657d440464b6aacf5f_JaffaCakes118
-
Size
138KB
-
MD5
b1f1545c825bc1657d440464b6aacf5f
-
SHA1
77bb24280d09017593f054cc72102a2b8118e6cf
-
SHA256
51882bacc30ae6521cf6c0316b537df527e943d0da6f1c3e3047b89c21dd6b68
-
SHA512
25650f5cbc8610c4949f2633294491661c64d72e27dd7820f6764d136631032cd907a26afb9348b26b77a44a0ad5791c2ba88b9a41c5c1bf480f904fbe74575a
-
SSDEEP
3072:BHAy7Vygfxh5LUO6bFAef77yp3HjO9DDV72+Kp9:37kgfBLN6BAej7N3J2+Kp
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1f1545c825bc1657d440464b6aacf5f_JaffaCakes118
Files
-
b1f1545c825bc1657d440464b6aacf5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE