Behavioral task
behavioral1
Sample
de968584f39a5961864399bc593cd66d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de968584f39a5961864399bc593cd66d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de968584f39a5961864399bc593cd66d_JaffaCakes118
-
Size
7KB
-
MD5
de968584f39a5961864399bc593cd66d
-
SHA1
6a5f0abcffa7f1f001d001d2fea3ac04c552adb3
-
SHA256
976bcda20cd1e2e938e1842de52316d6ef6cd9730b77ac5c9ba4a1b8ca74cbaa
-
SHA512
564fdb95053626531f1467b15a0e620a1af06503fa80df52a9d403c962d96295bf6421d419bdffe95d5c4c9f46ef672778b2fd6ac3cc195fdbfe41252ed21ec7
-
SSDEEP
192:CU17hbS77i0B5wtAPuoAx4wCMrpY7e8LqPZo5LdCfq1Rn6O3:CU17Qi0BS4Ax4r6+e9Pfqbn1
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de968584f39a5961864399bc593cd66d_JaffaCakes118
Files
-
de968584f39a5961864399bc593cd66d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE