Behavioral task
behavioral1
Sample
01d73273dc18b554d36b87d1aa66b4e8_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
01d73273dc18b554d36b87d1aa66b4e8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
01d73273dc18b554d36b87d1aa66b4e8_JaffaCakes118
-
Size
333KB
-
MD5
01d73273dc18b554d36b87d1aa66b4e8
-
SHA1
f53ac8345fd00fab09a94169c44b32bfc4b8d606
-
SHA256
89fa82f4859a9ddf20324a6a53dac2707c40a04df7f8703ce6078e0b6de81eb7
-
SHA512
64c6152fdecaea37b22af771b6d547853375fb6eebefc38ebcfcf2a50f58eb08d27f41e2a689f389f0e6bafbb59e203a7b71e830d0ea01364c28978d7c0ea0f7
-
SSDEEP
6144:2B2jWLdFlQVQ1hF8jkVH0J29FnypF8YEiQXsnF+Cmj1lR11SGXiJK8cSPlpQKAa7:y2iLdHsQnF8jk508953ilFs1lRDSGQl3
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01d73273dc18b554d36b87d1aa66b4e8_JaffaCakes118
Files
-
01d73273dc18b554d36b87d1aa66b4e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 35KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 349KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE