Behavioral task
behavioral1
Sample
3faabb7b8ed74ae724cae29932beefe5_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3faabb7b8ed74ae724cae29932beefe5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3faabb7b8ed74ae724cae29932beefe5_JaffaCakes118
-
Size
710KB
-
MD5
3faabb7b8ed74ae724cae29932beefe5
-
SHA1
24882d48feb49dced6df29efa9c79237be93637c
-
SHA256
01b1fa1a57e852666af40f84e89536cae45f0317056e5ce8576967599c08f7af
-
SHA512
0d57375e29e3c7edb169d4d2ef252cd079849675ce3119cd8de49a8045ad8f54f1bc40e4f3ddfb3ff0337bf5229877e9f0e53c591d7451c8d9720cf90c22ec40
-
SSDEEP
12288:R2g/Cn2tKjI+b9PwyEzxSo80Y4CxxuMa7xZg3oQyiu+uwmIL5CRELUn:R22ZUbeblt8x/uMaFmoQyiu+u9IVC
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3faabb7b8ed74ae724cae29932beefe5_JaffaCakes118
Files
-
3faabb7b8ed74ae724cae29932beefe5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 257KB - Virtual size: 684KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 433KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE