Behavioral task
behavioral1
Sample
cfbea9762c6f17d0bbe65cb6ef6afd53_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfbea9762c6f17d0bbe65cb6ef6afd53_JaffaCakes118
-
Size
84KB
-
MD5
cfbea9762c6f17d0bbe65cb6ef6afd53
-
SHA1
d5e3c9d6e48eadc0dcc3b97c66d4d321f730c1ca
-
SHA256
6c5fe116ce27d037d86f018d6372ef98c46f34dbd67a8072df95615e6b0b1eae
-
SHA512
eb805d8a4172b9a6e11c72ed420abbd55bab25b796d304aa4a54a18580a585831a453540901d816d23811b96c8c5ff85dee3d69671bf9e603a9ba4025df22d12
-
SSDEEP
1536:Yy4EoA87wXT9Vpe7Sk2w4Oe5VSY2mf8e5nzXjbtmfWw1DzLz2Q3dLtAdny4:Yy4EqUXT9VYd4FNJrzXjbtiW+vX2eli1
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfbea9762c6f17d0bbe65cb6ef6afd53_JaffaCakes118
Files
-
cfbea9762c6f17d0bbe65cb6ef6afd53_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE