Behavioral task
behavioral1
Sample
c016d94ba9763065c865a82505baa223_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c016d94ba9763065c865a82505baa223_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c016d94ba9763065c865a82505baa223_JaffaCakes118
-
Size
47KB
-
MD5
c016d94ba9763065c865a82505baa223
-
SHA1
767fc5dfebe90ec5fe1ea79f92720026326f2468
-
SHA256
88f9dc02d2c76c7402ffb48824f6d9c7e4dfbb418b35c427c045c26833c2814c
-
SHA512
33906a8c7dda982e8963d35e68ff3e6b493b96a2de507a03be22d97be385b0ac955ccf9178030aaaae2a5b4b8493a56eb4ab5ef1771c155b4514881f5b88785e
-
SSDEEP
768:f/I2SZ8uP1Ybkd1SZGUJjpzJEFhbG3fYK4wmA/RprQUKU+k68nmngJBg9xYdeVk:oDZ8S1YbY16GUJ9zJdgNbopVn+58TBhx
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c016d94ba9763065c865a82505baa223_JaffaCakes118
Files
-
c016d94ba9763065c865a82505baa223_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 29KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE