Behavioral task
behavioral1
Sample
d0fe68d0f13acd79f37b9bda37c5ad4d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d0fe68d0f13acd79f37b9bda37c5ad4d_JaffaCakes118
-
Size
49KB
-
MD5
d0fe68d0f13acd79f37b9bda37c5ad4d
-
SHA1
356cd4ef5d6540d07fa7208ccbb429ad1ad503a4
-
SHA256
99b7fd503ae960e53f27941c1d2445023c4195e105cc61732ea2564a9aea844b
-
SHA512
0d0bdd14c65d4205019351b8084dfc33cfdc9da8f9dd07ba00399929b1dc809e121aacef9b65759dfd8a96a87590808d458e23cd9ff8c1cb1b81240aba4d1341
-
SSDEEP
768:oepHt8dHOxqdeVonhVnnirMnlTyL6F0cCMVxAp5yTaoAFBsfuNml/67xEKa:dJt8dbFh1nirM9tFxhAnyTHwBsG4U9a
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0fe68d0f13acd79f37b9bda37c5ad4d_JaffaCakes118
Files
-
d0fe68d0f13acd79f37b9bda37c5ad4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
fdhytrxh Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fgo�rxh Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yyodyjtr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdyer Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yt856 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE