Behavioral task
behavioral1
Sample
29332965ec2f7fa326ec918b82092879_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
29332965ec2f7fa326ec918b82092879_JaffaCakes118
-
Size
234KB
-
MD5
29332965ec2f7fa326ec918b82092879
-
SHA1
7611e37f419895bdb6329e2c3a4b1e83c2cd092c
-
SHA256
2232ab07fa0b3b375bdbc5a22ecb0cf2e26210c97c5b11acc1a16b70818ca5d8
-
SHA512
5e3717a507ec8701b9d36ba350609a52b72b148b29b39fdc40769eec9414959a06ecf1f59b682e2e7d04738ae5de73381b726d209ab7386f0afa2fb6363b0437
-
SSDEEP
6144:mFhji6OcPBB4vxiGHVnxq4s7+ufnyEwD62h1T50/qy8yEwoS:8fdgvxizp7+uz2DT50Cy8woS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29332965ec2f7fa326ec918b82092879_JaffaCakes118
Files
-
29332965ec2f7fa326ec918b82092879_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 508KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 229KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE