Behavioral task
behavioral1
Sample
29b45311b14607a23bdd630f82e907f8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
29b45311b14607a23bdd630f82e907f8_JaffaCakes118
-
Size
177KB
-
MD5
29b45311b14607a23bdd630f82e907f8
-
SHA1
8e1b54590de7dab6225703824d016d87f1cbc53b
-
SHA256
b041dd7fd957662cf04d681c5a4a3b40818a4591d652e2687279e4ab1208afb3
-
SHA512
dd658a7a18092e869997254eed2817c772a07c0f4bde34b8c3fbdbda238890f4ef446d1662d48471cd3c215ed30aaf3b2097ca72e3a31a3d1cf0cd65cd72cba3
-
SSDEEP
3072:YDkdjlbf9rG5FQf3kaHmjVU/e25UCWX082s:YDIUQHmu/lWk82
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b45311b14607a23bdd630f82e907f8_JaffaCakes118
Files
-
29b45311b14607a23bdd630f82e907f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lagxwab Size: 90KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE