Behavioral task
behavioral1
Sample
b856ea245c55fa7ec8c0563f8e22e073_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b856ea245c55fa7ec8c0563f8e22e073_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b856ea245c55fa7ec8c0563f8e22e073_JaffaCakes118
-
Size
11KB
-
MD5
b856ea245c55fa7ec8c0563f8e22e073
-
SHA1
bd19a85bf072c43df703208d6b4732bc2e9d9068
-
SHA256
17017ceefbe32d32f8a2a0bc2ccf52cafa0325e3d59c18c497b17da7792658d7
-
SHA512
e50a794b93f47896aeb5590215d7681a68c62b1a9afcccb9970f6fb22dd3a73d68afb8d239f4ce9aa487450e5565d56c2ee4bec34cc4a4c59c0d15cb940c7ad4
-
SSDEEP
192:nROIi9vTgJVlmRlaQWRc++5GPuBAx9wCMrpY7e8LqPZo5LdCfq1Rn6O3Irus:Rjog/lmRgJ+5xAx9r6+e9Pfqbn1B
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b856ea245c55fa7ec8c0563f8e22e073_JaffaCakes118
Files
-
b856ea245c55fa7ec8c0563f8e22e073_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE