Behavioral task
behavioral1
Sample
0834e3f29ef07b3dd4ff15b353d2c088_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0834e3f29ef07b3dd4ff15b353d2c088_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0834e3f29ef07b3dd4ff15b353d2c088_JaffaCakes118
-
Size
1.4MB
-
MD5
0834e3f29ef07b3dd4ff15b353d2c088
-
SHA1
165c3987f8e842732fb6f1b82f974162c12795d7
-
SHA256
17790faba560a04c55e1f661cc9897c56223caf487f2516a17ba684ed0e0635b
-
SHA512
dbe066c54da2f8170c711a455bae66921ce0d45c58d74fe3a4704247640dc48a5526b20b7d9ff37eeeceda67a9924c9bda6bcf6721daff16ed9223b1c4d9ab20
-
SSDEEP
24576:ynSFJTz2Hoc8pybaN52u8gfVHT2TgDA3:ynSFlz2Hoc8pymNxpKsD+
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0834e3f29ef07b3dd4ff15b353d2c088_JaffaCakes118
Files
-
0834e3f29ef07b3dd4ff15b353d2c088_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 310KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 427KB - Virtual size: 718KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 728KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE