Behavioral task
behavioral1
Sample
f767f294ddb41e993ceb666eb4d7b0a7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f767f294ddb41e993ceb666eb4d7b0a7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f767f294ddb41e993ceb666eb4d7b0a7_JaffaCakes118
-
Size
1.2MB
-
MD5
f767f294ddb41e993ceb666eb4d7b0a7
-
SHA1
52ef77d61bbc99a5f862eb7cf4b8e77371f5934f
-
SHA256
f9abeff488433da471c0a0563bbed55da8f96e11ee175c789bb0b9cf83a41015
-
SHA512
282963e9339357e117244f66b613a636fcea775f5c9281ef5b2ddd24800eb1b2de06a25f023e051283277cada40925baa772b9c0edd56bbad6abd80e43279099
-
SSDEEP
24576:mrA2+q9fzaXj9SlsL17IYdWdemf0fIl4ZMWYHSOYc09A2l5qsfmCM:wOXj/xTqLf0/1hAW5L4
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f767f294ddb41e993ceb666eb4d7b0a7_JaffaCakes118
Files
-
f767f294ddb41e993ceb666eb4d7b0a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE