Behavioral task
behavioral1
Sample
29f20154fcdd637fd2310b519fa5dc31_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29f20154fcdd637fd2310b519fa5dc31_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29f20154fcdd637fd2310b519fa5dc31_JaffaCakes118
-
Size
205KB
-
MD5
29f20154fcdd637fd2310b519fa5dc31
-
SHA1
6a13060728747ebcc88c7784c4b11f10cbc79bd3
-
SHA256
3f6bfb9aaaa0772287fa1ad49b56d2e5a87ca5304bad514efaab008bf75dab08
-
SHA512
8be8011eef68587568b35eb6d95f73b1756ed77ac5655fdb20bd3032bf085fce432e8586fb89a467604d119e6af90fe1ed1ac1882bad65702cdf0c6941b6b50a
-
SSDEEP
6144:yeVZugP5ewS6pEU//S2gbNGP2sGLTJnLsYfHMg1oV2:LZ5P5PSKEqJgbU4LTRA17
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29f20154fcdd637fd2310b519fa5dc31_JaffaCakes118
Files
-
29f20154fcdd637fd2310b519fa5dc31_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 400KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE