Behavioral task
behavioral1
Sample
c292a8f3cde09b8e7b51e05ebfb59b1d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c292a8f3cde09b8e7b51e05ebfb59b1d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c292a8f3cde09b8e7b51e05ebfb59b1d_JaffaCakes118
-
Size
58KB
-
MD5
c292a8f3cde09b8e7b51e05ebfb59b1d
-
SHA1
435e0a4c4a61942d4a0f011ada8917a2923ce54a
-
SHA256
2ba3217268b2d737a542e7b7840a4480c655b2b9414d4c57e8b1c8bfa76322c8
-
SHA512
2f830b4b4b863c12e1a786bd89d9a3fdfd47031a116479d7e4166b80070d48023ae673483da1d3f2ec72c45271461e5afe06132da7f08cfd54db843cb02909de
-
SSDEEP
1536:gs04D+i18NcMaU5gegNY1GH0oQWIklNLS1dudK9IWB0o:50tuQgegNYoEWvvLSbWKKc
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c292a8f3cde09b8e7b51e05ebfb59b1d_JaffaCakes118
Files
-
c292a8f3cde09b8e7b51e05ebfb59b1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 38KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE