Behavioral task
behavioral1
Sample
29233e98d3cadc6fc1fd9511c627b362_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29233e98d3cadc6fc1fd9511c627b362_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29233e98d3cadc6fc1fd9511c627b362_JaffaCakes118
-
Size
20KB
-
MD5
29233e98d3cadc6fc1fd9511c627b362
-
SHA1
dd666fb926a6957e96f67999c23a80e5a154e292
-
SHA256
c0165a14e440413aff632d81d3482930e09b86db441e70cd2a43dc8298af6823
-
SHA512
39b089c90237b3fc3a036a04be1fd832dbf003bbf4304fa4d4fa8c0b601ba3c933703a2a7a389ec8b20222dc0d7af3eaab7c621704f04c79d5e0617b030d39ad
-
SSDEEP
384:goQXL4tmH2OGIHcSHiF1qiK11HbSbrare+t9Nc5ETSnDAebzdvNa:dQb4t42zI8giF1qiK11AeR9bunD/Pdla
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29233e98d3cadc6fc1fd9511c627b362_JaffaCakes118
Files
-
29233e98d3cadc6fc1fd9511c627b362_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE