Behavioral task
behavioral1
Sample
42e276fd89e54f778b5b04f00afba07a_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
42e276fd89e54f778b5b04f00afba07a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
42e276fd89e54f778b5b04f00afba07a_JaffaCakes118
-
Size
4.0MB
-
MD5
42e276fd89e54f778b5b04f00afba07a
-
SHA1
0089e8d2fed35f92e5d20ba0edffae66711d75ca
-
SHA256
ab92be81b674ed70f1ff11f36d9dc4de9285f1ba0cd49204893a6c8c68705058
-
SHA512
86fe9fe61149cef8f300536edb42feb7f9b3ee5edf307ed5172a1fb3b4c375e7b0a58f279ce1af6e20328cc99f62c095cd28e2335eec9e1b1a500bf0d404044f
-
SSDEEP
98304:/IQOhuIfrTxLI3B1XW0Xv7ZI7+vPMSiBa3t4NPEjDt:QFBr1+B1XWM7KSWa3tkIp
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42e276fd89e54f778b5b04f00afba07a_JaffaCakes118
Files
-
42e276fd89e54f778b5b04f00afba07a_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 217KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE