Behavioral task
behavioral1
Sample
41e01e5fe54b18ed8831bf3859124a8f_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
41e01e5fe54b18ed8831bf3859124a8f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
41e01e5fe54b18ed8831bf3859124a8f_JaffaCakes118
-
Size
7KB
-
MD5
41e01e5fe54b18ed8831bf3859124a8f
-
SHA1
55665410e4e67c726b0c01439c89430474ce4b59
-
SHA256
b3acf441ec5fee6d491fac869bec73dfee7c48f11561f449a535e5d0c3329e0f
-
SHA512
c3e55cc75f072b2a9009a7cc161595bd0e494195b7a4812bb3aa9f4f0be9ef63481f571029271fa407f42da998605097cc227bcc6260d4c079e042742a2cd25b
-
SSDEEP
96:WCWRB8/0bLw2qbLw5/3TjhdnV8yIWXNE4XtrqR0C20d/A6F3NdBY7uekXFx2d:mB8IK83xsyI8EwtqaC20d42bYyr2d
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41e01e5fe54b18ed8831bf3859124a8f_JaffaCakes118
Files
-
41e01e5fe54b18ed8831bf3859124a8f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 43KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE