Behavioral task
behavioral1
Sample
c13a6df3fbae12d89af64a725d627ef6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c13a6df3fbae12d89af64a725d627ef6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c13a6df3fbae12d89af64a725d627ef6_JaffaCakes118
-
Size
589KB
-
MD5
c13a6df3fbae12d89af64a725d627ef6
-
SHA1
47b4e032049cf7f1fdf760f3e25b5370083d6c9f
-
SHA256
4195ff69fd045c62ddd5d8cb05401646b56d6894d7cebcff6358234d67f5ab85
-
SHA512
69144dc465bfc596a936505900b925fcb59de8945e65bf68142dea41bd4fee77f44166ab92bdc8ff47893af94e4d570cf35e56c41e8dbdc8932f09094d6a4779
-
SSDEEP
12288:98C8W2+7oH5AK9CSNjg+UJRzdn7ttTB/XcN9uFluhLhuE++Z/jF:P83+VeCSNjgJRhn7rJcfMlu5V++t
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c13a6df3fbae12d89af64a725d627ef6_JaffaCakes118
Files
-
c13a6df3fbae12d89af64a725d627ef6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
%eukZ'6: Size: 519KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
%;"/"!6Q Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!pxK%dOb Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
[^k\V$>> Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t$2o;^y: Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6h/gy7L$ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
<]$D91-f Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iIB)24a[ Size: 48KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
K'[email protected] Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GWsyt2ZH Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE