Behavioral task
behavioral1
Sample
0824da8e9c26440f465c3435ff1a53dc_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0824da8e9c26440f465c3435ff1a53dc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0824da8e9c26440f465c3435ff1a53dc_JaffaCakes118
-
Size
499KB
-
MD5
0824da8e9c26440f465c3435ff1a53dc
-
SHA1
47079edbc1c35b826ec2a2c8440c2acb797beeb8
-
SHA256
9e13422e9f8f47dcac500483a8732b22eafeab9466e68f9b22e032774915ad50
-
SHA512
5951c9e1d685628e9728a70b91ad77616e42d12791e7affefeaeeaaf3a363c70a62d21852aae38512a2973125224bc0bd879c0d3f1ae136c7ad7e57926f1fa49
-
SSDEEP
12288:US1JghhZ62xqYZQCysDjopXeyg5+FFxWVFE:US1Jghz62xqYZGsDjopXy5GxWVFE
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0824da8e9c26440f465c3435ff1a53dc_JaffaCakes118
Files
-
0824da8e9c26440f465c3435ff1a53dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 268KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE