Behavioral task
behavioral1
Sample
10d1580a6815765b2265bc8981e41646_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
10d1580a6815765b2265bc8981e41646_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
10d1580a6815765b2265bc8981e41646_JaffaCakes118
-
Size
139KB
-
MD5
10d1580a6815765b2265bc8981e41646
-
SHA1
72dd3fa2ffb38d8e2be35582e619ad328490866e
-
SHA256
ede740a3a91dbd155356b68367aeb8d98fe28d691621598b282c4549b647037d
-
SHA512
ec11253c9e3d41175f5d770c211fbe5a50e09d4cee8da40a818cc14cdba4bbe424a13bd2c9242e2fadb44d57adf3561c2299b04e699e5183713a3adc0addc3ab
-
SSDEEP
3072:MgRhXZlFVR5k8sUlUioI/CWUw3l+I1fh2Suq8Eaf:7JjXk8snDIyS
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10d1580a6815765b2265bc8981e41646_JaffaCakes118
Files
-
10d1580a6815765b2265bc8981e41646_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 133KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE