Behavioral task
behavioral1
Sample
b439514daba38054fad7f4c21ea35117_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b439514daba38054fad7f4c21ea35117_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b439514daba38054fad7f4c21ea35117_JaffaCakes118
-
Size
34KB
-
MD5
b439514daba38054fad7f4c21ea35117
-
SHA1
209dc9fda4bcc86a6fa152277b90c467fc63012a
-
SHA256
786ebec06367c2e9e240ba9aa4b04af8cf5303e2fd24646d629b4db20f43023d
-
SHA512
43f1f1697a39b0975eb4cea0d972e76e1cf0d7b0fb5745aa5a5f9ffa46225483f233f6282bb19238171fe2b59328c8d1c010427825f0b9b5950f4675e1811615
-
SSDEEP
768:JasF23ai4BQP9p5RG/CN+QJM55Tq2EmFTaA2qxLha5Z:JRoHP/rShajkK
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b439514daba38054fad7f4c21ea35117_JaffaCakes118
Files
-
b439514daba38054fad7f4c21ea35117_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE