Behavioral task
behavioral1
Sample
c90e1b43eaf82681f39347b9e5b62d54_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c90e1b43eaf82681f39347b9e5b62d54_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c90e1b43eaf82681f39347b9e5b62d54_JaffaCakes118
-
Size
16KB
-
MD5
c90e1b43eaf82681f39347b9e5b62d54
-
SHA1
227cff35f2ac26536643590b135294bd26fa1212
-
SHA256
a9f2bccabea1c504780e2d84589368df80edd6c2676f948fde5631213c1e6942
-
SHA512
b9e65e021d073d5ce944334a66477b76f5fffed5ddfe1daf599823d66866ffd086d37cd6c73c16309997f350ae1b77c2f225a1d15344c39f63afee370aec5b83
-
SSDEEP
384:Iu/aS3brY8eag0x4t4Axvr6+e9Pfqbn1QyZaYd:Iu/z3Xea3kjx+ha5QyZaYd
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c90e1b43eaf82681f39347b9e5b62d54_JaffaCakes118
Files
-
c90e1b43eaf82681f39347b9e5b62d54_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE