Behavioral task
behavioral1
Sample
d355379b49f6f36bc30005e3373cc722_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d355379b49f6f36bc30005e3373cc722_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d355379b49f6f36bc30005e3373cc722_JaffaCakes118
-
Size
191KB
-
MD5
d355379b49f6f36bc30005e3373cc722
-
SHA1
9fd7bcdd690650c2450ab53558472bf45f7431a2
-
SHA256
71dc63642498b10cf6e8a5740f139b11405666ceb9fc6e23105d9f91eae86343
-
SHA512
84c065263a46da2f75f1699db2e56cd856462d691117026978b5d0c809f29a8c20abf6c2ebc4268edab0150df7689208a76a8ffdde3d61774612b4f179441a98
-
SSDEEP
3072:DNokSIMLCw1eXwkEZZ8AXFJrrVHgbenokRy7AS+RDeA4YPE+DJzlyE/o42DIu1Ut:DF+CseX1gZ8oJxUenZRDpfw4qIuml
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d355379b49f6f36bc30005e3373cc722_JaffaCakes118
Files
-
d355379b49f6f36bc30005e3373cc722_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 161KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE