Behavioral task
behavioral1
Sample
169c284f345526cc278a7852577a6ef2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
169c284f345526cc278a7852577a6ef2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
169c284f345526cc278a7852577a6ef2_JaffaCakes118
-
Size
21KB
-
MD5
169c284f345526cc278a7852577a6ef2
-
SHA1
22140fb645621f52c3109b70aec03c3932ce8d40
-
SHA256
1a194b6ce9b3aa15988954f92d12182343593788e0ada074237d17bd0e21a8bd
-
SHA512
32dcc2b4545e732ec1aa6d37aea9e5e3f68a53fe241e701bf239cc8bbd91abd2de33db53d7dafa5927c2d1c2c8f3c8bea46b240c53139428d69e7bb502daa7ec
-
SSDEEP
384:vfWfjAYjVoC5NLQeKOwHGhWvg+crIGIUxgDaUUhuj58F8p0YqAxLr6+S9Pfu7n5v:nW1jVoO0DObWvgTEGUD8ujY8ppxydeVv
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 169c284f345526cc278a7852577a6ef2_JaffaCakes118
Files
-
169c284f345526cc278a7852577a6ef2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE