Behavioral task
behavioral1
Sample
29ef029dc15807c2fba32c93a91c7824_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29ef029dc15807c2fba32c93a91c7824_JaffaCakes118
-
Size
37KB
-
MD5
29ef029dc15807c2fba32c93a91c7824
-
SHA1
e6e230b7ab4b2b9c351009766114023ede4c1c34
-
SHA256
b6ea3fa9c36827416d561f0340ca4ae2f4a9063c8cfd385991db2acad1f681ce
-
SHA512
61186ec6cba0710964f0e950d7418b7212114f7e7e1330e15ff11f9df51791cbcbe00062ffef07b1593a136b4c2fecfae4db0ee41344d68e234c70c019aba60c
-
SSDEEP
768:+Kr4I3pnTq/TGqMgA/5lln9xQPE+gkPTnjTZ008g:+dKTq/aD/579i8Z2jTig
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29ef029dc15807c2fba32c93a91c7824_JaffaCakes118
Files
-
29ef029dc15807c2fba32c93a91c7824_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Sections
UPX0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE