Behavioral task
behavioral1
Sample
0711ca17220f99a01ed162df1a92b8e0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0711ca17220f99a01ed162df1a92b8e0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0711ca17220f99a01ed162df1a92b8e0_JaffaCakes118
-
Size
67KB
-
MD5
0711ca17220f99a01ed162df1a92b8e0
-
SHA1
735999807cf304a5ed632a1e78f70b742ade0fe0
-
SHA256
150577f9f873569c6b5fb4de3673d00d8a5c9cfdb6dca70c4c51793a24fa0655
-
SHA512
7a89ed21665901837c9deeea2691d40cfba79aba12421275d2bdc2cb4121e3724c61d3ad88414d433a264d0f14403484bbec20f0d1e099fa8cd99d40b67464f1
-
SSDEEP
1536:KFnnyb62J/D3UDa1eqyw4rlI0oLixmt5pXqc4wkO+:KFY6grzIzwc9o+kzp6chH+
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0711ca17220f99a01ed162df1a92b8e0_JaffaCakes118
Files
-
0711ca17220f99a01ed162df1a92b8e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 63KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 963KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE