Behavioral task
behavioral1
Sample
ddbe0d65cfbc474fb2d65c9f5a4b09ea_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddbe0d65cfbc474fb2d65c9f5a4b09ea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddbe0d65cfbc474fb2d65c9f5a4b09ea_JaffaCakes118
-
Size
22KB
-
MD5
ddbe0d65cfbc474fb2d65c9f5a4b09ea
-
SHA1
9a898b99a0296266e892a31ce19ba81ed9dba3b4
-
SHA256
ebb1bbc54ead8a52e1f7057d61a3f6deabe37e9792f5ad6fce61046e1be718cb
-
SHA512
1b3e724bec37392b6bedf1b720168f74e54e527a37c572b6082be65c718bca919606b51cbd7e0da7300a3e306b8f189cbf9983744a8aa6dcba374356cfd7c777
-
SSDEEP
384:E2MrsYdy/Iv/qoRaX1OrHOOVIW+Ypz6pjWDHcAz0uJG1+AxRr6+I9PfYUDmo4:E1rIgv1RaVW36dWnz0uJG1Jx8LoIm3
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddbe0d65cfbc474fb2d65c9f5a4b09ea_JaffaCakes118
Files
-
ddbe0d65cfbc474fb2d65c9f5a4b09ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE