Behavioral task
behavioral1
Sample
eb9cf00187b5c6cbbcb0288ce6d08bae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb9cf00187b5c6cbbcb0288ce6d08bae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb9cf00187b5c6cbbcb0288ce6d08bae_JaffaCakes118
-
Size
728KB
-
MD5
eb9cf00187b5c6cbbcb0288ce6d08bae
-
SHA1
fa82fe83ba24f61f3c8adfc96ec6a020dcbae9b4
-
SHA256
d0a18b039b439da076ed4449b74eb293f95eb96521911606fa2a96d2f0e09116
-
SHA512
d2e9620a28fe16d5a592436af585351b648a5d14c6b90be04b001c494f94dd586644b6103a69b202bad5729359976fc58915d771659fb4af181f73ed8394571c
-
SSDEEP
12288:ZlPqpojL/9X2brKOqU/c8Rjs7U4dAlJ8YWrMGB9KhFpX2Hn+D:ZlPqpojhpOE8RjsQ4iLtWAnhr5D
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb9cf00187b5c6cbbcb0288ce6d08bae_JaffaCakes118
Files
-
eb9cf00187b5c6cbbcb0288ce6d08bae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 677KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE