Behavioral task
behavioral1
Sample
256619822229625c4db0fd323c20d94c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
256619822229625c4db0fd323c20d94c_JaffaCakes118
-
Size
99KB
-
MD5
256619822229625c4db0fd323c20d94c
-
SHA1
30e1258c3044c17393b313a6d8f88d207daa2dcb
-
SHA256
1a13ed1688b6438d67278685ae6563d75a9dcc16a412e7dd8e949c5fff7d56a7
-
SHA512
ffa1915de443d221fe2a675ecb3d43dc72905c68b3f77dfe1b194c505852949d0f1e6b1fc530d8744dc3a0cb91d70d16604aa2559698dcf78b083e44fabb63ca
-
SSDEEP
1536:6qXjnj/IauBc2O4LgdCWtomO61uImqRi65fax34SPZfyOQAIAa8v8b:6qzn7vuB7OV5mqRi65oNZfpIpO8
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256619822229625c4db0fd323c20d94c_JaffaCakes118
Files
-
256619822229625c4db0fd323c20d94c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ISii Size: - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ISii Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stach Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE