Behavioral task
behavioral1
Sample
dec40839affe8bbc21699ad35bf7dbd6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dec40839affe8bbc21699ad35bf7dbd6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dec40839affe8bbc21699ad35bf7dbd6_JaffaCakes118
-
Size
238KB
-
MD5
dec40839affe8bbc21699ad35bf7dbd6
-
SHA1
defc3ef55fb9ac8a49f42e47fa7ce9558858be8f
-
SHA256
2eae563c77737e409a6ede3cf73ad5638aeb2a98df3011b6dc7ca3fbadbed74f
-
SHA512
33e26afdc224a317afbc1aaa07e92d35d4f6c5f675d113f25542dd1fc189065be48916b1458bb182045b42f9a25f7dff8f5cf88d1157ed135286d98ef3a2f49f
-
SSDEEP
3072:hJw2j7JnCS/GjTLZUN1mqchHF7xUGkZDTXf/Mnd9IHEyuz4V2XpZBVCzUOHhyUIL:hJZpDWL+apHEDTXfEduxuzVfOHki7bW
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dec40839affe8bbc21699ad35bf7dbd6_JaffaCakes118
Files
-
dec40839affe8bbc21699ad35bf7dbd6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 230KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE