Behavioral task
behavioral1
Sample
29438740e7165959fb77b627100a82e9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29438740e7165959fb77b627100a82e9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29438740e7165959fb77b627100a82e9_JaffaCakes118
-
Size
106KB
-
MD5
29438740e7165959fb77b627100a82e9
-
SHA1
dc2d5b88dcaaaf8e9597c95fc47d5b14c8c62593
-
SHA256
47374469dd6f1f93325b81fbda8209d603c196e78d577b61097b37382f7852e0
-
SHA512
9b323a74f0732108715b29274c3f7ec6f230d78acd410d44a6f5088060e3cb18b96c76d96d9c28ecbfca66e2b938a1ee852fba5b063cd0367a50f53d15c24997
-
SSDEEP
3072:VgiRhpmoDljYjLzGqV9bL2eI+P13EMCNFv:VgOhEU0Lz3VI+t3qFv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29438740e7165959fb77b627100a82e9_JaffaCakes118
Files
-
29438740e7165959fb77b627100a82e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 600KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 152KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE