Behavioral task
behavioral1
Sample
JaffaCakes118_a77bddc23470b26fb82a457f6efe485b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_a77bddc23470b26fb82a457f6efe485b.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_a77bddc23470b26fb82a457f6efe485b
-
Size
1.0MB
-
MD5
a77bddc23470b26fb82a457f6efe485b
-
SHA1
402f44eb3b3c6b4ba3f4ae0a9565393147294614
-
SHA256
71cef093daa652359ac1e230499f18ce635b72dab461cee8e7bd3e8f7329eb15
-
SHA512
4fe675d255c8c2f5627dacf0406becf3d9918e6999a4957c7b6d80be2d400f7724ec55b5a1628d02161f8290ab8a89624db56cb7247decc7278c49fba2557153
-
SSDEEP
24576:RyngFg9MVEQdB0Z/Ip/XBc950hpi2QiGB2bb2NLeOC5UhKgbc96x:hFlVlB0Z/IpPqvD2Mib2heOAU6g
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_a77bddc23470b26fb82a457f6efe485b
Files
-
JaffaCakes118_a77bddc23470b26fb82a457f6efe485b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 197KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 814KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE