Behavioral task
behavioral1
Sample
4031cc79960f0f9b615b08e2eb60dcf1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4031cc79960f0f9b615b08e2eb60dcf1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4031cc79960f0f9b615b08e2eb60dcf1_JaffaCakes118
-
Size
15KB
-
MD5
4031cc79960f0f9b615b08e2eb60dcf1
-
SHA1
b86d65e3c73bcf3ba636b58856b820cb03e969f8
-
SHA256
dba5875b26b3ad8af7f6e500797515c5d6bc5729089732b1e61e9f0bb62433c7
-
SHA512
8be22a2fbc480df68dff8392bfcc7a8193883bb51fc517fcd74bbf7d7f5403e0fab8f5160bfc48db7578588cbf775934ed01a61752e6b4f1a3f2377880f8a0e1
-
SSDEEP
384:AzuhWiq254uyl4FZfuC2PTbAx4r6+e9Pfqbn1:AzuheFuyl4Df2PTsxvha5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4031cc79960f0f9b615b08e2eb60dcf1_JaffaCakes118
Files
-
4031cc79960f0f9b615b08e2eb60dcf1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE