Behavioral task
behavioral1
Sample
b8f939f716ffea24c1877bd0a9e8dd7d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b8f939f716ffea24c1877bd0a9e8dd7d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8f939f716ffea24c1877bd0a9e8dd7d_JaffaCakes118
-
Size
652KB
-
MD5
b8f939f716ffea24c1877bd0a9e8dd7d
-
SHA1
e19fd046edff4856dfef1c3702a4e66771876399
-
SHA256
1ce35b821de4591f4844ca57db7b7919fae569d0211e050d23a74aa9ab958a76
-
SHA512
f31b5b7e1a741c2f53e29b16aca34f3f4080ee1828ffa27fb537a6502bcd8153c777a02eb767404d4347f71c39bd722357a269528a040abd98ba3f86c45d189a
-
SSDEEP
12288:LVCr8nmnxic4MKy5Jfwv0bwrKGa/F28xMwDX8FheoC+5WOEnlFNR2dmw/gBxIW33:ZCEYR4MKsJ4v0U2fN242zXElzA/gB
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8f939f716ffea24c1877bd0a9e8dd7d_JaffaCakes118
Files
-
b8f939f716ffea24c1877bd0a9e8dd7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 294KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 311KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE