Behavioral task
behavioral1
Sample
0808a3be969d91aa616e9bd077a24c46_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0808a3be969d91aa616e9bd077a24c46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0808a3be969d91aa616e9bd077a24c46_JaffaCakes118
-
Size
249KB
-
MD5
0808a3be969d91aa616e9bd077a24c46
-
SHA1
262254688915b043ca0caf0f35c6ef5160cf308e
-
SHA256
f51002add08124ecc597d898e340278e72752430acdfa51762b45a977c1f952e
-
SHA512
51354e85e272fb3f720a5347679b037756b252eb32e089a45d36e312ed1697592c5227110c980372335897001b96fd3b9af00df75303d73c3a1057d5e74ebce8
-
SSDEEP
6144:4w3Bhk2UhP9juL10ocQrdi7w7j60A9sAsYsTl8FPtIiYy6:bx6bhVOsIi854sAsYIGI5Z
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0808a3be969d91aa616e9bd077a24c46_JaffaCakes118
Files
-
0808a3be969d91aa616e9bd077a24c46_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE