Behavioral task
behavioral1
Sample
b3784e786d1b552914bacaed5cc7b8e5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b3784e786d1b552914bacaed5cc7b8e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3784e786d1b552914bacaed5cc7b8e5_JaffaCakes118
-
Size
360KB
-
MD5
b3784e786d1b552914bacaed5cc7b8e5
-
SHA1
a30e22ee1895812d96075949bd42cfcbef62229c
-
SHA256
933dec9e721c09b2ccd5f724afbe2e8c7514a7ee8f36a0e5bd7ee82ff4da6822
-
SHA512
3d29d0c7182325494eed7fe2319424d6a3db67f999fe4b7bf06de540a3ee1f8fb6b1e63b4f760ccf183c40fc3a38ac109d2d5498578e4d0ff02ec89d84a7afc8
-
SSDEEP
6144:Js79xkdWGYmfw/1QSJSWjOLLAYU6pWP6uwfzuPmv/AyJ1JqDBmricAwOHSix:Js7oIGYmfw9JbOLLHpWGiPmvFLJT2h5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3784e786d1b552914bacaed5cc7b8e5_JaffaCakes118
Files
-
b3784e786d1b552914bacaed5cc7b8e5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 351KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ASPACK Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ADATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE