Behavioral task
behavioral1
Sample
067c827848e7d62b0d27e5bdd07ba302_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
067c827848e7d62b0d27e5bdd07ba302_JaffaCakes118
-
Size
76KB
-
MD5
067c827848e7d62b0d27e5bdd07ba302
-
SHA1
630f0824ab48d8483eb48a449b685a29bb8bfbf8
-
SHA256
bacf8f008b608d8703a11e9fd4234ce5e37dfb39e605df96f023f121fc1fd324
-
SHA512
2a82a76546a4b12b4742c58e7e751767f79a3e20924b561aa505aac522f9b8de6dea7957f4f9f55fcc2cbfa53964d89fa5b49b666d17fd40239edafffe320d9a
-
SSDEEP
768:UdCXfeW0sfWxYHkuTSv3/AzyLDTjaHky500JG+JxpLoI:gIhfzEuU3oWLDTuHR500JD
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 067c827848e7d62b0d27e5bdd07ba302_JaffaCakes118
Files
-
067c827848e7d62b0d27e5bdd07ba302_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE