Behavioral task
behavioral1
Sample
098e65934068fd5649fad19b7532d25d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
098e65934068fd5649fad19b7532d25d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
098e65934068fd5649fad19b7532d25d_JaffaCakes118
-
Size
1012KB
-
MD5
098e65934068fd5649fad19b7532d25d
-
SHA1
8a564cd18e7f65d9556d9ee30bc091723f0bf384
-
SHA256
59c94aa58ea24b467f334abafc37800b4339fb0d65243982d06799832ba04070
-
SHA512
d103eb5c744b7eccf5be7a11c1164a451d4132031c390b658b17dea676de9166d36b33491600af5bbeeda1b2c6ce3349cb1348ab96fc5bd6a549a34b94632df2
-
SSDEEP
24576:gCe+0rQfTGppnW1q6//CZrND0gt2hKa9FAHVO4a3OPJD1d0fjtnc6:3uzW1xyZZdM96HsCUjG
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 098e65934068fd5649fad19b7532d25d_JaffaCakes118
Files
-
098e65934068fd5649fad19b7532d25d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 196KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 796KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE