Behavioral task
behavioral1
Sample
29bfbfb923a3e4f0fe41c4bfc5dc42dc_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
29bfbfb923a3e4f0fe41c4bfc5dc42dc_JaffaCakes118
-
Size
411KB
-
MD5
29bfbfb923a3e4f0fe41c4bfc5dc42dc
-
SHA1
432f2b5181f3012d3306e7f90adb355df78122ef
-
SHA256
d7ff1ee5f12e52fcd639c32ae10e723112491b624634bad4f1658d5a0ff635cb
-
SHA512
560f7f75e27ea8511023df07b6187b849ed3859da3dfd57fe66ef5090e1f282c870e2c063b1956ab67b4ba6620c7214001756b1f2e8b53a94e2cd12ab08a2a06
-
SSDEEP
12288:rg8Tjm4D3ElTIoSOU6mIkz6Csinr/9J/bSSjg:rguFDUlTe6mIkznn79JjSSj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29bfbfb923a3e4f0fe41c4bfc5dc42dc_JaffaCakes118
Files
-
29bfbfb923a3e4f0fe41c4bfc5dc42dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 564KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 164KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 245KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE