Behavioral task
behavioral1
Sample
0625782f088c1185f033d9d923b8f167_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0625782f088c1185f033d9d923b8f167_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0625782f088c1185f033d9d923b8f167_JaffaCakes118
-
Size
8.8MB
-
MD5
0625782f088c1185f033d9d923b8f167
-
SHA1
23b63b43db8ba7e9a2473b14a284129724f3df4e
-
SHA256
03cfec37d383d5cf0e284bb54e3ebdb89eb394e4d48e7732eac5461a0970e256
-
SHA512
b5a27fcbf7f7a5ef8bbe74dfcacf47890f890069c92660641532935081e050b48586a12e785ce3011ec29378d5af753f60a3fca428f28e176826921887e82cae
-
SSDEEP
49152:Twi0L0qAX2Zjm7oZw67ZN8JloPjJ7TnIaY3:0i0c686/oZ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0625782f088c1185f033d9d923b8f167_JaffaCakes118
Files
-
0625782f088c1185f033d9d923b8f167_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 154KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSkpkUeJ Size: 26KB - Virtual size: 25KB
lMYRzqLY Size: 28KB - Virtual size: 27KB
KfLzwGyr Size: 51KB - Virtual size: 50KB
RXqWpwXu Size: 551KB - Virtual size: 551KB
PwgJnOCj Size: 386KB - Virtual size: 385KB
tMNXZyNj Size: 176KB - Virtual size: 175KB
bkuDFleg Size: 24KB - Virtual size: 23KB
DIWzwvtA Size: 5KB - Virtual size: 5KB
XOirDXnY Size: 93KB - Virtual size: 93KB
hGyzqKQp Size: 21KB - Virtual size: 20KB
ODKPeWbx Size: 32KB - Virtual size: 31KB
KzUTQinV Size: 5KB - Virtual size: 4KB
ytCcMaVZ Size: 12KB - Virtual size: 12KB
KQWQgTgD Size: 9KB - Virtual size: 9KB
hdrrDfHZ Size: 95KB - Virtual size: 95KB
InKilhRR Size: 18KB - Virtual size: 17KB
wQbXiRIk Size: 1024B - Virtual size: 734B
fVSWXpVE Size: 358KB - Virtual size: 357KB
emxuBdPb Size: 75KB - Virtual size: 74KB
DurOSgtP Size: 111KB - Virtual size: 110KB
gVMPsjTM Size: 11KB - Virtual size: 11KB
AkhTGGkZ Size: 120KB - Virtual size: 119KB
ZNEYNURN Size: 28KB - Virtual size: 27KB
DWAEspFf Size: 26KB - Virtual size: 25KB
qLJxjCyK Size: 26KB - Virtual size: 26KB
zRcHEMXd Size: 21KB - Virtual size: 21KB
DapMKVbw Size: 16KB - Virtual size: 16KB
wTDlutYo Size: 7KB - Virtual size: 7KB
hIiHIasR Size: 2KB - Virtual size: 2KB
UPYeMawF Size: 9KB - Virtual size: 9KB
mVVkAMOS Size: 55KB - Virtual size: 54KB
xeAAXTVx Size: 49KB - Virtual size: 49KB
ZYBCFcms Size: 69KB - Virtual size: 68KB
VMmmNhsb Size: 33KB - Virtual size: 33KB
NnZQfvvF Size: 33KB - Virtual size: 33KB
TrVnZzPj Size: 57KB - Virtual size: 57KB
XyslhIke Size: 5KB - Virtual size: 4KB
Txclndth Size: 33KB - Virtual size: 33KB
ePjslNoE Size: 134KB - Virtual size: 133KB
naFclJMz Size: 28KB - Virtual size: 27KB
XTnJzDcW Size: 42KB - Virtual size: 42KB
jouUntsc Size: 68KB - Virtual size: 67KB
arHuPyuP Size: 15KB - Virtual size: 15KB
QncwfiDT Size: 16KB - Virtual size: 16KB
YSuPrbOu Size: 8KB - Virtual size: 7KB
wzaZFzUF Size: 20KB - Virtual size: 19KB
xGKQvcvp Size: 36KB - Virtual size: 35KB
IkNjZAAj Size: 31KB - Virtual size: 31KB
yJfjUtcA Size: 143KB - Virtual size: 143KB
JuaLbPcL Size: 4KB - Virtual size: 4KB
kyUZaGrp Size: 30KB - Virtual size: 30KB
TyJsULID Size: 33KB - Virtual size: 33KB
xJGNoatZ Size: 22KB - Virtual size: 22KB
nDfkGmxN Size: 19KB - Virtual size: 19KB
wupxBMkl Size: 23KB - Virtual size: 22KB
hrValQQu Size: 36KB - Virtual size: 36KB
YICKOQmi Size: 35KB - Virtual size: 35KB
qQXYnXoM Size: 138KB - Virtual size: 137KB
ymbhHEQq Size: 39KB - Virtual size: 38KB
uZzRBHPX Size: 2KB - Virtual size: 2KB
XpEuAQKu Size: 58KB - Virtual size: 57KB
VQCBzFau Size: 512B - Virtual size: 360B
ocfEzSud Size: 63KB - Virtual size: 63KB
CedJdqNl Size: 3KB - Virtual size: 2KB
oGjXIpUb Size: 563KB - Virtual size: 563KB
KbOazjLl Size: 18KB - Virtual size: 17KB
EfeFHrlF Size: 6KB - Virtual size: 5KB