Behavioral task
behavioral1
Sample
3f50375face8ff234b3a55788ff528e7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3f50375face8ff234b3a55788ff528e7_JaffaCakes118
-
Size
428KB
-
MD5
3f50375face8ff234b3a55788ff528e7
-
SHA1
cd5e07f0911379a61acc300f8df329e452606d46
-
SHA256
ef22cf6f3cfc88c1520ea82dd2e42eb7788cec6d873711b6858a2080872dce60
-
SHA512
56a102bc7112435c07fd4f831599aee31bf6e2a73993ee23899728094cdbb3bad70531ed7b4f7fb3aef6ffd097c8b1c9b6819a1a8624c07082065790031c3037
-
SSDEEP
12288:hyWQln6drHuAco9l9ULIJi8m/mjGALf5r:g6drHuAcodUL0ifejGu
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f50375face8ff234b3a55788ff528e7_JaffaCakes118
Files
-
3f50375face8ff234b3a55788ff528e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 422KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE