Behavioral task
behavioral1
Sample
29e6880cc6a1f9513cd31acbdcd32d26_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29e6880cc6a1f9513cd31acbdcd32d26_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29e6880cc6a1f9513cd31acbdcd32d26_JaffaCakes118
-
Size
1.1MB
-
MD5
29e6880cc6a1f9513cd31acbdcd32d26
-
SHA1
721f2781044fb15918c1a5b421a5dcb2694fba78
-
SHA256
3acf46b8a8e16c5ff2be8e44b716f1782b8e0e2d2bdf76d59b70981f4b41dbb4
-
SHA512
a69cbae2ee577f4e44f6073b266b607a83c4c506ea67706767103c4a9d3f2500401298ed2f5eb14541380d1c4e95bc2e9a7cc67a2b479eba1f7a65b2044a2bd0
-
SSDEEP
24576:2wGluem542L4/WPCfGpx9Bb4kP7KQiEy7rePtGhJOlepQd:2TTte4DfK3P7uECelGCgQd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29e6880cc6a1f9513cd31acbdcd32d26_JaffaCakes118
Files
-
29e6880cc6a1f9513cd31acbdcd32d26_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE