Behavioral task
behavioral1
Sample
08a12dd3e4326fcaaae437f18f7179a0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
08a12dd3e4326fcaaae437f18f7179a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
08a12dd3e4326fcaaae437f18f7179a0_JaffaCakes118
-
Size
76KB
-
MD5
08a12dd3e4326fcaaae437f18f7179a0
-
SHA1
8a1b9598024d7507785f3195d7e1d80d474be8c3
-
SHA256
a7c6e5c1ae020a93a75d51618c61737c40ecf876d628c78bb6b01090bf161704
-
SHA512
2165da4f8c85d7fd996cca141949b87d9bcc59d34a8f974eb4346cfab8173b6eb7e11fb94910b0d3015265badc0d47ed0c9c40f4bfbddfc0b691a9f953498217
-
SSDEEP
1536:h38+rqGuVbFH50sstsSunHbXvbgWW9z5sg/3ZsQkR+9Vb:h3jW3bFaJtMHbXvcTnFkRE
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08a12dd3e4326fcaaae437f18f7179a0_JaffaCakes118
Files
-
08a12dd3e4326fcaaae437f18f7179a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE