Behavioral task
behavioral1
Sample
0133d795a6b524917b2ad8c22f2fab44_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0133d795a6b524917b2ad8c22f2fab44_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0133d795a6b524917b2ad8c22f2fab44_JaffaCakes118
-
Size
555KB
-
MD5
0133d795a6b524917b2ad8c22f2fab44
-
SHA1
99d278996d017a93a800d90142f17171fba82024
-
SHA256
1358df1fbad8ff3615850044d8d0b46a713bea22c7eb5df88a1d5e5d16c630fd
-
SHA512
b404783a77eb275d3c0e8cde59341cd02cae3c829fc110894b7fe3035134e6d6362dc08b6e7a250697d1a1e310b15c4b9ad29062d0ae2502653c7e4d2b401358
-
SSDEEP
12288:tOuQDaQzH48cF0j8rLNliX1BsrZYtzAIvghcj0WLQ+A/3Fh:IlaQj4nFk4NQYrZYtRvgim
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0133d795a6b524917b2ad8c22f2fab44_JaffaCakes118
Files
-
0133d795a6b524917b2ad8c22f2fab44_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 168KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 373KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE