Behavioral task
behavioral1
Sample
d284cac8aded95d62f83dbcf9e1e52f7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d284cac8aded95d62f83dbcf9e1e52f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d284cac8aded95d62f83dbcf9e1e52f7_JaffaCakes118
-
Size
220KB
-
MD5
d284cac8aded95d62f83dbcf9e1e52f7
-
SHA1
4bc98285c9a7e41a7bf1d355bcf999ab84f08bcb
-
SHA256
caf8547d671816ac66b4a864bf3ee6b7196fbb7c12c0629c850e68a15a0b2d8d
-
SHA512
586d22b37e85dbebaa7410f5363414fbe767e92a16c4e454e55908779b9b4c1571e0059acd3dae2b9a433cc300bbe27611b2bc99459fdc7ac37f169ec40b2a5e
-
SSDEEP
3072:lndWNLcZkiozCVftUeuh7sdbAKA+q09Bg1h/dcUO7MwAobN84/qJvstIZRj1eLG6:ldWNLgCzCXNcNx0H0CH7Mw5bN9UVGGo
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d284cac8aded95d62f83dbcf9e1e52f7_JaffaCakes118
Files
-
d284cac8aded95d62f83dbcf9e1e52f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Chdr Size: 4080.0MB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Dcsg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lpd Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.irhdr Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zhr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rwdsh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rwrhd Size: 63KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rvzd Size: 255KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rjt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aewvs Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA