Behavioral task
behavioral1
Sample
beaa8faece078b599e732537acc18238_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
beaa8faece078b599e732537acc18238_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
beaa8faece078b599e732537acc18238_JaffaCakes118
-
Size
255KB
-
MD5
beaa8faece078b599e732537acc18238
-
SHA1
d518a6988041ccc649dae1ed883ebefde7fce20e
-
SHA256
f5fb54b55154c4d0d27061136945aa1fda56637b8190e43e31866bb5a783f2f1
-
SHA512
aae5840d71710c243cd93c136a2a4860a5624e679787357f0e707fa3ebdf77d5704acfa335fa6ec950eaacbbbbf11b256b159ba1a8221ca7e79b16c009d20d85
-
SSDEEP
6144:CbjTET0BSRf0TR1i9QuCq4lULfXqkEuNIgXdmm02c:C/TIcSRf0TR1ipCqTLf/EuqgXdmm
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource beaa8faece078b599e732537acc18238_JaffaCakes118
Files
-
beaa8faece078b599e732537acc18238_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 218KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE