Behavioral task
behavioral1
Sample
1137929e978615a9fa5e4ea64e70c293_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1137929e978615a9fa5e4ea64e70c293_JaffaCakes118
-
Size
119KB
-
MD5
1137929e978615a9fa5e4ea64e70c293
-
SHA1
950b388efdec0788f88513cfd9a3a6f054188fc7
-
SHA256
e4999a8c9eec39776e8e67dabfa7f772391ac8815488f5c6f6c37f8e8a8b46f4
-
SHA512
cec6ffd27f8b5ea4eb872f1576dd2da5ac4ace96b5db89948dda6f42fefb9a739d2f3423ad59fcceca157305f354d57996dd257c1ad43fbe3130f5bc7c9e185e
-
SSDEEP
3072:SFBREd+EidEJTklav8i4zQsZlTNO6wsBYrT2QST4ZFFHXlPXUkSf:OLEd+NdE4hZxsQBYrTvST4ZFFpkjf
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1137929e978615a9fa5e4ea64e70c293_JaffaCakes118
Files
-
1137929e978615a9fa5e4ea64e70c293_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE