Behavioral task
behavioral1
Sample
ddcb19c375f69d4449d041a5413e8821_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddcb19c375f69d4449d041a5413e8821_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddcb19c375f69d4449d041a5413e8821_JaffaCakes118
-
Size
191KB
-
MD5
ddcb19c375f69d4449d041a5413e8821
-
SHA1
08a2d7b7040e891965a37a1ffbfcf9a0944ea1d7
-
SHA256
99c32c9f5b8bbd090d4324c3b6fb9ea56dbfeed4a5fc3bfaa69008960a9168a2
-
SHA512
c80b9e68e22643c20e8a8a6ee8b005ca2c746d930ec9c1a122794bcaca453b1f574e78b7601ea29b9b0489bf9d37c1da9115da8bf1fa7491f627e515cd9ceaa7
-
SSDEEP
3072:n6D+uV4NRwcr4g+BLRIXrzGicPnkFZ7mfWDJQYGWdwGE+AGnU+A83qzmjmu1UlUe:ni+bQcr4/xeXHZcPkP7mfWDHGWGGjpU5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddcb19c375f69d4449d041a5413e8821_JaffaCakes118
Files
-
ddcb19c375f69d4449d041a5413e8821_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 161KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE