Behavioral task
behavioral1
Sample
bcccd9ae8bc0b0b18d31f8ef6953cd64_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bcccd9ae8bc0b0b18d31f8ef6953cd64_JaffaCakes118
-
Size
432KB
-
MD5
bcccd9ae8bc0b0b18d31f8ef6953cd64
-
SHA1
255c6a76eb3e229036ec6e5c7dc6b7193bc7d6f9
-
SHA256
dcde4ae0d37ce02d19a420afedb4e30267c9f727a4b32ac9d0345b630917f34e
-
SHA512
572994b805163be8c69b2987d7f710787bd4ef3cac69786a90da5785125fee62a1978ff24590556b5b89a6b4e9d65dd888347523991e9cd050fc374c9b72bb93
-
SSDEEP
12288:3X8XvwOSxtYrCsJbUxAuBedVry/zg9ze1ZvYLOltUX:3Qwf8rJ4BBwtybg9zspCjX
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcccd9ae8bc0b0b18d31f8ef6953cd64_JaffaCakes118
Files
-
bcccd9ae8bc0b0b18d31f8ef6953cd64_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE