Behavioral task
behavioral1
Sample
f13cf06f8beb2ca2c3c85531b5723b2c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f13cf06f8beb2ca2c3c85531b5723b2c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f13cf06f8beb2ca2c3c85531b5723b2c_JaffaCakes118
-
Size
496KB
-
MD5
f13cf06f8beb2ca2c3c85531b5723b2c
-
SHA1
126cb64f21f5a1651d1ba0731d98cd455f98fd86
-
SHA256
71565192fdf78016e9096f6dfec6915bedeb5a7b279ca139476e1cf1df97b2df
-
SHA512
084009c84af2230ef8c55a5b9557a27685026dd63f090b6dccc16f53d2f97c5307ddfb664f6534ce76ef425cfe423e4ce4330185a048a8f873b35f03cc5f395f
-
SSDEEP
12288:aW7X4rzee+qF2d2t4RyKQSAWm4gjJ6qM4+jTCHUmWRFRi:BEeexupyrIU0rD
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f13cf06f8beb2ca2c3c85531b5723b2c_JaffaCakes118
Files
-
f13cf06f8beb2ca2c3c85531b5723b2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 112KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 365KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE