Behavioral task
behavioral1
Sample
ba5fa3979f28d428ced1419adfbd69a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba5fa3979f28d428ced1419adfbd69a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba5fa3979f28d428ced1419adfbd69a1_JaffaCakes118
-
Size
12KB
-
MD5
ba5fa3979f28d428ced1419adfbd69a1
-
SHA1
b22d73cbec7ce084ee8b69194f3f0b548c0d36f2
-
SHA256
5777a203e1cafec8aa35e7b3b69df1b36ad17f09b07dc056134188313084ca2f
-
SHA512
9e511173ea3e5b17b729bb49bc32af4b42e1020acc4e1719fd090c7c452a4dfe8bbe4775b454cbd7e05cc580189aa6a6fa21b4a97c014e6d3268502b39f51823
-
SSDEEP
192:qpbGH7YCvcInupOjic+TNeK6SoW49GqAx2wCMrpY7Y8LqPZo5LdCfffnMO3:qpbgOLOjX+TNeKRoW6GqAx2r6+Y9Pffr
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba5fa3979f28d428ced1419adfbd69a1_JaffaCakes118
Files
-
ba5fa3979f28d428ced1419adfbd69a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE