Behavioral task
behavioral1
Sample
29541e47763ba93e43f9a37f85704b14_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
29541e47763ba93e43f9a37f85704b14_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29541e47763ba93e43f9a37f85704b14_JaffaCakes118
-
Size
4KB
-
MD5
29541e47763ba93e43f9a37f85704b14
-
SHA1
8045fed18f7b3ab803047043b47d3b1bd0cd1960
-
SHA256
2f74692bd93f1694b8580878f8a5764d3485f85b611dc890ef99bf0baa30655f
-
SHA512
838b00d38066c0158fb1ff3a862d6b652832b91250deceb19b018f62a196528dbc59f1ed1132f3b748a9250309164a7fa63510b02fd06fc32d1ec37a3e38d310
-
SSDEEP
48:y2lj6e5M+luOVwjqWPHN8DTB47Qvwr+CZWv9vTKB7JNwhAno2+Hy43zW2L1h:Rl54hHua7zwv9g7Jr+Hja2L1h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29541e47763ba93e43f9a37f85704b14_JaffaCakes118
Files
-
29541e47763ba93e43f9a37f85704b14_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 655B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tqn Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE