Behavioral task
behavioral1
Sample
29b8c72f43f3587742669d4a55b36024_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29b8c72f43f3587742669d4a55b36024_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29b8c72f43f3587742669d4a55b36024_JaffaCakes118
-
Size
34KB
-
MD5
29b8c72f43f3587742669d4a55b36024
-
SHA1
ff7ae482ecfb9debc2b1a4343b39b78825141f68
-
SHA256
28ed0312704e006b9d1dc08702a54b7b268ce5a6911af6a8154ecc9cb869f32e
-
SHA512
d0803dad9b40d3c900971e429578229d18be40d175fd1e0e24215d4a48bd2b36029730b3edf7971bbe69c1e506ead8250ec9aeb269eb93d19c686cfdb47e1d5d
-
SSDEEP
384:7Ev0hxCPaNJawcudoD7UJij2M6cQVRpPZCEupHaFx6CZwubUw+py:7EvynbcuyD7UYj2wCRpAEPxLZJUw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b8c72f43f3587742669d4a55b36024_JaffaCakes118
Files
-
29b8c72f43f3587742669d4a55b36024_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE