Behavioral task
behavioral1
Sample
c10d3d991e91bb50aeb21db0347eb564_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c10d3d991e91bb50aeb21db0347eb564_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c10d3d991e91bb50aeb21db0347eb564_JaffaCakes118
-
Size
663KB
-
MD5
c10d3d991e91bb50aeb21db0347eb564
-
SHA1
b1f8081dfa65fa77c4d340843a9430450e9fc9c0
-
SHA256
b981e2304ff1d17a04d9b5d40ece13edede58ddfb7710e2d61d5d11c950c14cc
-
SHA512
96aa49501bdeff9afdd4ee48a6c0055de9d5b93073072bd61608422cc6c26da2b946c3cc9d887026bdeda64f19ba07160de76d12fafe88668fa73fb751362d9c
-
SSDEEP
12288:AKrqmD1lTn78Isk3bYlDEBMYilJjfrpbYPt0P4dkYaVh+yVqGFPH:RjpljVsk3bmDEBMBM2Y/yPPH
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c10d3d991e91bb50aeb21db0347eb564_JaffaCakes118
Files
-
c10d3d991e91bb50aeb21db0347eb564_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 184KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 465KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE