Behavioral task
behavioral1
Sample
b7f0329d16e3e170c012beb3727c41ed_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b7f0329d16e3e170c012beb3727c41ed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7f0329d16e3e170c012beb3727c41ed_JaffaCakes118
-
Size
712KB
-
MD5
b7f0329d16e3e170c012beb3727c41ed
-
SHA1
99e61ea380ff3388c599cee1a8e328c2d86fbddf
-
SHA256
1b3c57203766bb7267deff20b8daa8b7856241ce470da7a0b35a6b4edb240b93
-
SHA512
6866634dd8a947c99d7185d43e06042d9d1a7d58a9f6225c3f9d0fc221a9333cde246594fbc181108cc1276559e692728d62e5d24d7ff8b90cff6b3622de52c1
-
SSDEEP
12288:Kdrpn7KcxWe79y75Q9NjeprFy2E5uu8mUL3hx49K/QaE2SF/8kjSvjmmwcRBxId1:krpn+uL79yqn6Pbwuu8nx49uJZS98kjn
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7f0329d16e3e170c012beb3727c41ed_JaffaCakes118
Files
-
b7f0329d16e3e170c012beb3727c41ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE