Behavioral task
behavioral1
Sample
dc548fb4eeb540af718848a93fb98f82_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dc548fb4eeb540af718848a93fb98f82_JaffaCakes118
-
Size
149KB
-
MD5
dc548fb4eeb540af718848a93fb98f82
-
SHA1
723751b492ff8a191d8326227edcb24fe115779e
-
SHA256
7387f40ba1666fb42f38f4f42dfa04d5ae34057b1b945991945d53835180d164
-
SHA512
0aad8a19fe5c5865c97733c1fd89f4b66d031c4b76499312687e6657b60d1d0865d03bb11223a0684a3836da69fe621393a4feec043aad6e28beeabc2137044c
-
SSDEEP
3072:PqpMfFqXyGtG6D9MZ/Hlu/qqKDZm4sJWm/uHf2l60:P38hpMdFlY4UX/u/2l6
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc548fb4eeb540af718848a93fb98f82_JaffaCakes118
Files
-
dc548fb4eeb540af718848a93fb98f82_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 144KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE