Behavioral task
behavioral1
Sample
d0aba9a37e0c87c40b9eb039f8992dbb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0aba9a37e0c87c40b9eb039f8992dbb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0aba9a37e0c87c40b9eb039f8992dbb_JaffaCakes118
-
Size
260KB
-
MD5
d0aba9a37e0c87c40b9eb039f8992dbb
-
SHA1
4b7dd2c83cefbed47d58ae82cb8471405030653c
-
SHA256
197430171fca8cc9597723199919eab3e414986b4b51c3e917b49ff3b95e58a5
-
SHA512
20599f56cf91ffe1aba2180b86c37938b59623f5b2ecce586dae9aa3a2f28c173460722a87d574e59557ae13f2c1e0f9010a0ec7526f0b290033b288b36b8aed
-
SSDEEP
6144:mM+SC9JeSgmZxZN/JbKDGBuQTFvJ9/jJAGL:mLD7bYcukFr1n
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0aba9a37e0c87c40b9eb039f8992dbb_JaffaCakes118
Files
-
d0aba9a37e0c87c40b9eb039f8992dbb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 237KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ECX Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE