Behavioral task
behavioral1
Sample
444381fe75652e60f86d44cc8cf672c2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
444381fe75652e60f86d44cc8cf672c2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
444381fe75652e60f86d44cc8cf672c2_JaffaCakes118
-
Size
15KB
-
MD5
444381fe75652e60f86d44cc8cf672c2
-
SHA1
4d4cc89703f3d1de20667b23704b724946d35f17
-
SHA256
bc94a2f9575c9c4f284ada973267d84dcab5be75ca80039b40ebd43e0ad2c492
-
SHA512
0630818eea29b7ed032c99ccc40ed73f763ea40a0708be57a2fb4f09fe104ee9da0e6ae8260bd2f268c7ca409b76074bc67603cd7b15a8f417c265e7abd71e1a
-
SSDEEP
192:PAqQqNqmHaRL3ArOq6JnA5PukAxAwCMrpY7e8LqPZo5LdCfq1Rn6O3Y:PdQmNaRLQJtAxAr6+e9Pfqbn1Y
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 444381fe75652e60f86d44cc8cf672c2_JaffaCakes118
Files
-
444381fe75652e60f86d44cc8cf672c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE