Behavioral task
behavioral1
Sample
fa48a870346d78dd790094f5a802358c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa48a870346d78dd790094f5a802358c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa48a870346d78dd790094f5a802358c_JaffaCakes118
-
Size
13KB
-
MD5
fa48a870346d78dd790094f5a802358c
-
SHA1
903f46a7f361f68c06dfd35feb12a7ce34fb4b60
-
SHA256
49b7a7c3aa04d8181e8af6df6c4124783bb2ec464c8d9865715e4bce11325917
-
SHA512
f7147532f43195a9d41780f9fb64c60a06a171c82984f5ac19192e370e4c83f6ee7ece2f17111378849197274b8b7eca8a79419c322abf3ba5a542c086add349
-
SSDEEP
384:qu/aS3brY8eag0x4t4Axvr6+e9Pfqbn1QyZaY:qu/z3Xea3kjx+ha5QyZaY
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa48a870346d78dd790094f5a802358c_JaffaCakes118
Files
-
fa48a870346d78dd790094f5a802358c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE