Behavioral task
behavioral1
Sample
b0f177357e6823dfe9515c9d2558339a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
b0f177357e6823dfe9515c9d2558339a_JaffaCakes118
-
Size
277KB
-
MD5
b0f177357e6823dfe9515c9d2558339a
-
SHA1
c4030ed9fc2c50fdfa17ccfc0fabdcbd8c91c8ba
-
SHA256
5da7e3059c02ec26dc262e0da777113107f78ae6762bae951f316747660af21a
-
SHA512
b668c7d9df4a1de35a51f1571e4fde7a990a023489f0120ab6cf36fb6dfce6baaddae491308f7759afa0a6673d045d1f202b4457cc19c784755fc5b2b817e0f7
-
SSDEEP
6144:4/oSkblsTW9CG0pGnDw19w3u27DZV4XIKI9Qs7nhta:4/oSOldkGrD072fZV4O9Qszhta
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0f177357e6823dfe9515c9d2558339a_JaffaCakes118
Files
-
b0f177357e6823dfe9515c9d2558339a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.scpack Size: - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE