Behavioral task
behavioral1
Sample
a29ad19c56de8addaa20d5a49e72144b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a29ad19c56de8addaa20d5a49e72144b_JaffaCakes118
-
Size
41KB
-
MD5
a29ad19c56de8addaa20d5a49e72144b
-
SHA1
86a19a384e9513ea5b2cdf352a048ee64d07fdb9
-
SHA256
162f6bbc31c70702acdc072a3a32890deb3342c75081817b582113210ad757a2
-
SHA512
29c65bfe49b90700c1a92d97e5530fccfa7451873ae14046eafb1f7b3caa31fe28d24a9eb6719ec84b34c503b324fa063ac12fc103957334a05b4943afa3baae
-
SSDEEP
384:Ta3KAaGaNLxU5nI7ObrIwwvcvlFjOWqwhQ+iDVXwKp9lq7Yu0pjnRAE9bQNz:C9lwLIrIPvc/jOohxiesl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a29ad19c56de8addaa20d5a49e72144b_JaffaCakes118
Files
-
a29ad19c56de8addaa20d5a49e72144b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE