Behavioral task
behavioral1
Sample
07e704b0fdf6c899ad61c56b024dc771_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07e704b0fdf6c899ad61c56b024dc771_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
07e704b0fdf6c899ad61c56b024dc771_JaffaCakes118
-
Size
1.1MB
-
MD5
07e704b0fdf6c899ad61c56b024dc771
-
SHA1
bd00921079e1bdb1e2b485ac81efe2febc15b57b
-
SHA256
7f8cfacdb9e60ff8d6cdf6dc17ece20fc81bc0b87de45d3351a399e0554e3171
-
SHA512
91d91a8999f08961e8f7819521ad61c6149c59a3fac6d43bc229b2285fcf9df3ead114098c6821d28c562ddb05539da3ea61f5725227c88bf4b68e0a1cf153bf
-
SSDEEP
24576:xO7O859B/1pyFDpPe4gzh94keIHz6ADy9z6UK:07O8XBdpyNh8hGkeIHBOWF
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07e704b0fdf6c899ad61c56b024dc771_JaffaCakes118
Files
-
07e704b0fdf6c899ad61c56b024dc771_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 30KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE