Behavioral task
behavioral1
Sample
f5db3ca342cff692ed5ae8bf69191091_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5db3ca342cff692ed5ae8bf69191091_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5db3ca342cff692ed5ae8bf69191091_JaffaCakes118
-
Size
1.1MB
-
MD5
f5db3ca342cff692ed5ae8bf69191091
-
SHA1
85ea6bee47660aeafab016634e7c0d3767cf16d0
-
SHA256
9c172729232d28e1748f37bd801fff682791be3a5422c2f5d40f0615fc0e43a9
-
SHA512
96d42a2c6fea973193f40dcb0688eb7e6a79290f047bacf69b5283b97f72e92ce1d6b309e4bac0064cdbfe25d3060d67004d2e0b8c90dbb36a0f7ecf1bf907df
-
SSDEEP
24576:vuc5AgDqV4guP3A8bCgMqffhwGQuigS1IXfU8bwMVfFsnZe6eiC2:2XgDq7uPQ8bCtEdtiQs8bwMV9uZeL
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5db3ca342cff692ed5ae8bf69191091_JaffaCakes118
Files
-
f5db3ca342cff692ed5ae8bf69191091_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 323KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE