Behavioral task
behavioral1
Sample
29e7ac60d05fad839679cc9da567f327_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29e7ac60d05fad839679cc9da567f327_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29e7ac60d05fad839679cc9da567f327_JaffaCakes118
-
Size
123KB
-
MD5
29e7ac60d05fad839679cc9da567f327
-
SHA1
387a7d60b453f5ddad738ca7fe65c9bfb3246194
-
SHA256
87e65ad4faa3f507cbfc4dc6c6098b93f0f2eeed38aa34fd864f9953156a6143
-
SHA512
1838972e41b2ef27c94101511aca4c5c6a47d8eb11ab8dd9a2aff2ac7dc92f67332520e8150df7af9d9996b18729779bf074bfcb406409a1cdeaf6af3f8cfd56
-
SSDEEP
3072:teSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLsyZNC2TkVv:tVYrJrOSsRwcptZw2TkVv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29e7ac60d05fad839679cc9da567f327_JaffaCakes118
Files
-
29e7ac60d05fad839679cc9da567f327_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ