Behavioral task
behavioral1
Sample
e25c02a7a8fa258537ff2cc742b56f40_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e25c02a7a8fa258537ff2cc742b56f40_JaffaCakes118
-
Size
7KB
-
MD5
e25c02a7a8fa258537ff2cc742b56f40
-
SHA1
c0f677446e06dd7b60a62984e0708a5a284edd36
-
SHA256
13b8b501811cf1dacca56a5103504b2f83eee799f1afc7da63191eff7cb93779
-
SHA512
f0bc6476f85d72d54e85bae847776bf32c3b46d04ffb56e323cc5a8b95d21d03693afbe350e9280a5912b4dfc97d9e4edd3cfc6c92705cd5c98478a1550c7575
-
SSDEEP
192:nkPucAxCwCMrpY7S8LqPZo5LdCfuR1nuO3z:yAxCr6+S9Pfu7n5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e25c02a7a8fa258537ff2cc742b56f40_JaffaCakes118
Files
-
e25c02a7a8fa258537ff2cc742b56f40_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE