Behavioral task
behavioral1
Sample
03e6b9be14f3f28c9c5c00e8213853a7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03e6b9be14f3f28c9c5c00e8213853a7_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
03e6b9be14f3f28c9c5c00e8213853a7_JaffaCakes118
-
Size
1.2MB
-
MD5
03e6b9be14f3f28c9c5c00e8213853a7
-
SHA1
2e0a422973fbea05e1b37e32e42c0e98606c4254
-
SHA256
3eed62f9a1cb9e09b4419bd3e39f6da379511526cd3b90fed61f2f7ba3ffc486
-
SHA512
589243997448a487a345cba5afe043c8469137e9724fa414b4f423850885a1e65a946206cda3651b9436a5fe52157b8adce3250005cf2612c63b65a21ddb0f6e
-
SSDEEP
24576:MGaCI9SFppoP25mX94/D8a3l2ITQ1+vMvRoLeMqeAgf8e1lo9LX7:MGLPpoe7YaVbQ1+vMaBIe/oJ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03e6b9be14f3f28c9c5c00e8213853a7_JaffaCakes118
Files
-
03e6b9be14f3f28c9c5c00e8213853a7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE