Behavioral task
behavioral1
Sample
0f46813f14d6f4344a3ad54ea5f4cd11_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f46813f14d6f4344a3ad54ea5f4cd11_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f46813f14d6f4344a3ad54ea5f4cd11_JaffaCakes118
-
Size
114KB
-
MD5
0f46813f14d6f4344a3ad54ea5f4cd11
-
SHA1
c04aca755b3dd602e8bbf80488a0596a53be951c
-
SHA256
6a894bd0aa1ccaecf3ece4add307b193056f43492120dbeed5ccd18d0242f777
-
SHA512
149148a5117703cfefac2b3ac10d47051b8e9d5c0ff29c9277bd08ba2c3f650c3d4fb0bd9eea0371704455a3dc5c9f7f60f6fa03a91f1766aa8f39f8d88c333e
-
SSDEEP
3072:TyF4WQI0yJTfEvW3nLeOJx7iQcSfkWWlUkm+6AQ:TsRQVyJTymnLeOP7i1Sfjz
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f46813f14d6f4344a3ad54ea5f4cd11_JaffaCakes118
Files
-
0f46813f14d6f4344a3ad54ea5f4cd11_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 95KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uro Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE