Behavioral task
behavioral1
Sample
ffe7304fd920a3ae43cfe2c45575b599_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ffe7304fd920a3ae43cfe2c45575b599_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ffe7304fd920a3ae43cfe2c45575b599_JaffaCakes118
-
Size
1.4MB
-
MD5
ffe7304fd920a3ae43cfe2c45575b599
-
SHA1
24a3b73f5abee35b6e22fc686815f711607bd9a6
-
SHA256
f29be2b0b42f0a732e26219812488d35185ed2b6c4b8bed6dcdcdd3247f7fbd8
-
SHA512
ac913c88ff3223907a31ac436b0be64a535e7d9a48d2b72b33f7ccc928dde16f3677a24cdbf68ab32ca5abf457288da7dabd2fc275d7b5a719fe2a2eb57ec4b3
-
SSDEEP
24576:Xp5pE4GMJAe/iggH+i8zWmnr/kYUlqm1PJ8n+1HiU:Xnp2vOkWWYbWwm1xDI
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffe7304fd920a3ae43cfe2c45575b599_JaffaCakes118
Files
-
ffe7304fd920a3ae43cfe2c45575b599_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 256KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE