Behavioral task
behavioral1
Sample
37ae058e6453aa7edb88883bdc6db70c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
37ae058e6453aa7edb88883bdc6db70c_JaffaCakes118
-
Size
767KB
-
MD5
37ae058e6453aa7edb88883bdc6db70c
-
SHA1
392b32e981179ebf644ad7b16e480a29fcb578f1
-
SHA256
5c9ce0650a0d7b33b0d6df9d1826702fac17d7d26636886be4338217fc112ccd
-
SHA512
7b6b1b36480e868ddafeecdb51a09eb91368253ed96bee7c9eec2bd32faf091edfb06a0234593b2cad9c6e2ec165537ad39465e2f2ac217085e8447c3c33736c
-
SSDEEP
12288:NQxRcI+DA12STOQADuJ0Kqg8qLRDJeVbEOZFgJV/Efha7hsD0fjQnQNw5uZKLCmF:2xRX+016sgHUJCHRaqw+6sC0
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37ae058e6453aa7edb88883bdc6db70c_JaffaCakes118
Files
-
37ae058e6453aa7edb88883bdc6db70c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 759KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE