Behavioral task
behavioral1
Sample
cf6ee8b17e490bc8e9f706f53fb89ebc_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cf6ee8b17e490bc8e9f706f53fb89ebc_JaffaCakes118
-
Size
174KB
-
MD5
cf6ee8b17e490bc8e9f706f53fb89ebc
-
SHA1
dd60314b1787dd8166a695ecf9ad8ee0f82e2a1b
-
SHA256
57f7f0d3802436cb56c954a63e81a83f0982c116ba5fc446d732df75369fd043
-
SHA512
4e21ce557a995473debaf9d397c7f20ca1fc136573b8eaa32dd3069b8101372c3916e957ca1f794c5db83de7c9eeb4d227af1f3fc218fb137573df3a4ea8aa9d
-
SSDEEP
3072:Qx2wB7EB36Tr2TlZRhtJT4lsPy7X708h7we3b67oeFw3ri3dqfVc4pGp:QhI3+a/34iPy7XNr3W7bMdfzG
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf6ee8b17e490bc8e9f706f53fb89ebc_JaffaCakes118
Files
-
cf6ee8b17e490bc8e9f706f53fb89ebc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.doc Size: 74KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fggegfg Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ashjlkc Size: 36KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kl�fgdh Size: 44KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.���gfhd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hjkfdgf Size: 7KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE