Behavioral task
behavioral1
Sample
3a1f62d6ab6ec457940b73f0e65ba6b9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3a1f62d6ab6ec457940b73f0e65ba6b9_JaffaCakes118
-
Size
602KB
-
MD5
3a1f62d6ab6ec457940b73f0e65ba6b9
-
SHA1
0bc6599bea4598d5c7f7a9b81b17fb0b3e649e41
-
SHA256
79425fe7d0c482f7b4b5d65ff20ee86e2e2df2013bb1ee37e893dc76b179a66c
-
SHA512
f35d44322572bd87948e924f8aed141103515cf37fa93c278873bf08f1445824fe607f6cca805e153f6c590c29b2e1103f1127c21d7f7fa186426141202de4fc
-
SSDEEP
12288:V3TdtLW5WIj1YSSdFxHBSXyMzBUWb9lx/9AgHLo8OW+rBI:9Dsj1dE3BcJ9nPx/igrp+e
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a1f62d6ab6ec457940b73f0e65ba6b9_JaffaCakes118
Files
-
3a1f62d6ab6ec457940b73f0e65ba6b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 193KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vc++ Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE