Behavioral task
behavioral1
Sample
b8d58bd4899f06309eb85273a98a1faf_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b8d58bd4899f06309eb85273a98a1faf_JaffaCakes118
-
Size
656KB
-
MD5
b8d58bd4899f06309eb85273a98a1faf
-
SHA1
b5a4edf479364478684b1a06ffbc8c4c94975b32
-
SHA256
af2f83a650b14b512ad1989fd09aebbf7197eebbccbe984adb83135e139de761
-
SHA512
280e2905086f19cb1766e47307c43ea244e0ba298ecbc7cf3db5c256dec772f2a7d886cf8bae8a00340a7d9a94c1e2b2ee9c2b3eb05b38cce0777bf9fa3929fa
-
SSDEEP
12288:5T2t3F8h+/BoXy34UWNvN9lIpeJFdzIFYrE07E8:N2kh+WyoUWNvNzIwJwK/
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8d58bd4899f06309eb85273a98a1faf_JaffaCakes118
Files
-
b8d58bd4899f06309eb85273a98a1faf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.scpack Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ