Behavioral task
behavioral1
Sample
2d39bd1566060e6a0455aecd31b6d5ab_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d39bd1566060e6a0455aecd31b6d5ab_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d39bd1566060e6a0455aecd31b6d5ab_JaffaCakes118
-
Size
21KB
-
MD5
2d39bd1566060e6a0455aecd31b6d5ab
-
SHA1
3560c3f2257625e98d14847142ba62c289ba956e
-
SHA256
e8a9bd96bebc690f5689258244c56711b1e6bd5deb83d17bf6ee23223b28dc81
-
SHA512
b61a878b5da27e2d3bfac59a5d68b314238d9424660286d36a1d940829486c6d714bdb64460459607d96ce6f9ea7a11824f85367d5d1c8c3a5649bdeb24917e1
-
SSDEEP
384:A0scQ+YAwUzS+6I2Q2dG7g8z++ED9fsPC1GqeNM2MKObmhiqAxLr6+S9Pfu7n5v:EAYX2ilQgGf+F5kaFsM2RObBxydeVv
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d39bd1566060e6a0455aecd31b6d5ab_JaffaCakes118
Files
-
2d39bd1566060e6a0455aecd31b6d5ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE