Behavioral task
behavioral1
Sample
b860519af97c14bb2d6a937fc914c731_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b860519af97c14bb2d6a937fc914c731_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b860519af97c14bb2d6a937fc914c731_JaffaCakes118
-
Size
41KB
-
MD5
b860519af97c14bb2d6a937fc914c731
-
SHA1
a4963597d42b4986089ae625b12bc189e97dc094
-
SHA256
16febad699d4545416782e1336b37589f8409a18a3ede1d284181fc82c7f2c1f
-
SHA512
983829ca75e79583c4a0173b27bcd51f0d0a2149dc18df9d3bb72df2a4f52c2a5092dcf45abd70b621353e145919624bc8820bf09f532f9f3c340236e7081562
-
SSDEEP
768:6x2ZiddEC7lRaqtcSI3QpG3bvb2m9RkUT4rdlnjUsWc5ax3deVFv0fGJPL/83:6ATWlsCNI3bvyyb2FjUmMe+GJP43
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b860519af97c14bb2d6a937fc914c731_JaffaCakes118.exe windows:4 windows x86 arch:x86
Code Sign
e6:10:f0:91:37:d1:1f:ba:7d:28:d8:8a:c4:1b:0b:1e:b0:04:28:70Signer
Actual PE Digeste6:10:f0:91:37:d1:1f:ba:7d:28:d8:8a:c4:1b:0b:1e:b0:04:28:70Digest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 24KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE