Behavioral task
behavioral1
Sample
b32a9f6d0001ed96f0c4209221015f61_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b32a9f6d0001ed96f0c4209221015f61_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b32a9f6d0001ed96f0c4209221015f61_JaffaCakes118
-
Size
600KB
-
MD5
b32a9f6d0001ed96f0c4209221015f61
-
SHA1
2de7a770aac7e0d8c2f9c8483c9803c1f5590a43
-
SHA256
64f8761f6a7f5b52f6b39f44d021ab94233dfe59f2cc16686718754f7747fe95
-
SHA512
3d1ce61b90ce6b81c94a2a482597138d0c6f9a6a1429f3f3d6f19db09e88a1b56213d491f40a9c89bd497b85e653e675bbd0f375a20788f97b437bd931a6a5f4
-
SSDEEP
12288:yywYpL/mgIcNLjfpuDa3a7a/QVHc3wXR9egVsirgKUUyqGW2:bDygHN3fp4D013whR9lRj2
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b32a9f6d0001ed96f0c4209221015f61_JaffaCakes118
Files
-
b32a9f6d0001ed96f0c4209221015f61_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 263KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE