Behavioral task
behavioral1
Sample
52017e4cd882ed66c00d62265f9e2a0c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52017e4cd882ed66c00d62265f9e2a0c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52017e4cd882ed66c00d62265f9e2a0c_JaffaCakes118
-
Size
309KB
-
MD5
52017e4cd882ed66c00d62265f9e2a0c
-
SHA1
72a5eb1b9d260d7e695f8cf6d16d4d17bdb3c488
-
SHA256
758af86c7dc999035c6ad2b4596075a7737ff8398bb20fd8338da07d06848318
-
SHA512
a11bca7dd110129b3841d9360ee6d131540cd11824ca00a2fdc0492bb2b28ae5a4443e46d9c4c48cff20625bc3d0d0ed3ac84d20ceb53125f3fd5794920e3c9e
-
SSDEEP
6144:DqAWONQq/WzXvv0HuG26onJ0eF8yZ7gDCh66D5LszuJvMz:ZNQUuXvvcGtC0i8v
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52017e4cd882ed66c00d62265f9e2a0c_JaffaCakes118
Files
-
52017e4cd882ed66c00d62265f9e2a0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 300KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE