Behavioral task
behavioral1
Sample
0b8e3a03835538522a3169b05a28b8c4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b8e3a03835538522a3169b05a28b8c4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0b8e3a03835538522a3169b05a28b8c4_JaffaCakes118
-
Size
1.1MB
-
MD5
0b8e3a03835538522a3169b05a28b8c4
-
SHA1
77b4b07f7f41c9f781d8e5a8feea6dd2324eb40c
-
SHA256
e6c90b7f3ffdfada2ff3cbb7160b8cf2f95a0480cf58122aa4fa68307a924376
-
SHA512
d7dd40d7471ca122e29145daf04c684c335f534c5611d1c67e8e0c978c62412ce90693731cbade462035dc9af52f22106e8f6af16cbc8d74b1273a397f4f65b3
-
SSDEEP
24576:tIHy+ZbxhZ2hMP235o5W9IDqcAQLhiHvJyd86Zu8JpAuiY2r:kZNiL9ZwYPJyd8Yu8JpArY2r
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b8e3a03835538522a3169b05a28b8c4_JaffaCakes118
Files
-
0b8e3a03835538522a3169b05a28b8c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 80KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 590KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE