Behavioral task
behavioral1
Sample
eff384eae92f253904c96932ef061f20_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eff384eae92f253904c96932ef061f20_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
eff384eae92f253904c96932ef061f20_JaffaCakes118
-
Size
1.2MB
-
MD5
eff384eae92f253904c96932ef061f20
-
SHA1
0025b4bbb98332fcb20de5ac3882260714d1d66b
-
SHA256
ff2461a00eb522afcb875a6c40f00f3087ea6f59f301fa348e757fa034da9d3e
-
SHA512
55134abef335ea7c3dda1c252848a5eb7b744512a6d19854ec394455607b14dc29f60a404a801cc1749de390b8ca36801e6b8e68c7e28c889cac7ccfa1e380ff
-
SSDEEP
24576:dF6SnkaXo6FEAof+VfG39LKuxUaE+mh4fhN+M1ddhgjtwi3m3SgnWsigk:d7kuNVm9GueLFMd1DhIwi3iSgnWz
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eff384eae92f253904c96932ef061f20_JaffaCakes118
Files
-
eff384eae92f253904c96932ef061f20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE