Behavioral task
behavioral1
Sample
f64a3bcac762e5906c05d9f77d01303b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f64a3bcac762e5906c05d9f77d01303b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f64a3bcac762e5906c05d9f77d01303b_JaffaCakes118
-
Size
24KB
-
MD5
f64a3bcac762e5906c05d9f77d01303b
-
SHA1
ac4b239ef2c25aa958da6de812228310c25004e9
-
SHA256
28d252f0fc00b2b35f597bb37f683bc4227d6fc857feec6eac19397bf52d3481
-
SHA512
87f52caa0b5bb7818697e7507351e66733481b70b3c46ec5acb2d1eab1e6aff3423742f7fc9b7bf4dfe9ab1fa40b4bafc8272e7dccd922121f5162c4f8294c9d
-
SSDEEP
768:l49pEB0EQvcs2LJhdgL0H/6M5exxHha5:S9pEmEwcv9fND0V
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f64a3bcac762e5906c05d9f77d01303b_JaffaCakes118
Files
-
f64a3bcac762e5906c05d9f77d01303b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE