Behavioral task
behavioral1
Sample
29f89ea2d308608521290bd5e01256b3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29f89ea2d308608521290bd5e01256b3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
29f89ea2d308608521290bd5e01256b3_JaffaCakes118
-
Size
369KB
-
MD5
29f89ea2d308608521290bd5e01256b3
-
SHA1
9a771fee711f7df094785694ba790fcea6a9927b
-
SHA256
29e29e62aa58bb3680ce817447c2fd32e857266683160846ed6b986bc5bd58f9
-
SHA512
5f57b551774a0a566eed771230f7b7668ea975738fcd51b46bbcb639ab5c5844392d64ce88fe82ce0a2c24539a5efe0b974a7a37ea6b11e331522f54636abfbf
-
SSDEEP
6144:gp6G/KUCqK2AeQ8MZiHOaq+3EBQqvT8INihTlFRAfP4f8jMK67dcP1mE6FQPBfo2:gkUE2An8MZm30yIT7+A34Uj4aPF6WPlt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29f89ea2d308608521290bd5e01256b3_JaffaCakes118
Files
-
29f89ea2d308608521290bd5e01256b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 636KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 367KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE