Behavioral task
behavioral1
Sample
29f0ea532f141afe39ff7beef377e74a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
29f0ea532f141afe39ff7beef377e74a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29f0ea532f141afe39ff7beef377e74a_JaffaCakes118
-
Size
89KB
-
MD5
29f0ea532f141afe39ff7beef377e74a
-
SHA1
cdbdbc3467ca05eb867fa53e224c411575e92bf4
-
SHA256
d2312f0ca985bb7cacc56d947c089cb3c6402cad629786a48956de7a9e53909e
-
SHA512
0a90f4ba6a9b1fa74899264b72a76cb38b5feb3f4e93ef54192ef5d1e05291ac87b5c577bafb1a77bf2b7315754d62eba4ecc7e4a32c3b7cc82a43a6f9ba84cf
-
SSDEEP
1536:/u4TfcVRvH3XNeQQP88kXx/E19bLwR1jQ8VHGOLBIRWHvys8tS++L:m4TfcHv3XAQly1dLmVHjL6Was8tBa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29f0ea532f141afe39ff7beef377e74a_JaffaCakes118
Files
-
29f0ea532f141afe39ff7beef377e74a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE