Behavioral task
behavioral1
Sample
0a5b0536f33d97d177ead03d17a0a4d0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0a5b0536f33d97d177ead03d17a0a4d0_JaffaCakes118
-
Size
46KB
-
MD5
0a5b0536f33d97d177ead03d17a0a4d0
-
SHA1
47c2d0fc73448ca06d27b762949b0898a6341792
-
SHA256
a05d68dcb246eb8d191787c8741b17e0f29090e5038bfb8fe467ada18ab26387
-
SHA512
532be9890875c2e7d05c7a2b541a1217d20c137f028d5ac0743771113221774cb5b73335c4140925c45182def817eef54ddfbae6c324d25b2deefb44652f2815
-
SSDEEP
768:e/9HKBZHbG4WOVaHUnzw7FKc4RVamSIYlbV3jhzXiIVwdR9INRAfd19FaSo:+qBZHdjRnzKKcKnvmbV3jMIudSUd1/o
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a5b0536f33d97d177ead03d17a0a4d0_JaffaCakes118
Files
-
0a5b0536f33d97d177ead03d17a0a4d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 45KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE