Behavioral task
behavioral1
Sample
550864b325f4635915fd833d4ba702c6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
550864b325f4635915fd833d4ba702c6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
550864b325f4635915fd833d4ba702c6_JaffaCakes118
-
Size
20KB
-
MD5
550864b325f4635915fd833d4ba702c6
-
SHA1
fc8425886005d2477e4a19de5b2948eb9fe37700
-
SHA256
b812c539141a1db2ecbea2ab7e90d441a5b68b61f6060e5d1ae19626062762ff
-
SHA512
470ce0c87df3bd703e4d6404fa5dbf612d6ed053861966f92b8f384809654b8bbe69b34e3d99622f8ee1710a19d69442a6baf408e265add654d804cfae878f84
-
SSDEEP
384:IxJFAkqxxhLbWW8qhIGUbIgDbbSzqfVWRGtAxBr6+Y9PffPzx5v:KbUxXW2aFb2zqfVWRGmxMbPr/
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 550864b325f4635915fd833d4ba702c6_JaffaCakes118
Files
-
550864b325f4635915fd833d4ba702c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE