Behavioral task
behavioral1
Sample
0c4d99e522dd5c0292234e5ede37e6db_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0c4d99e522dd5c0292234e5ede37e6db_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0c4d99e522dd5c0292234e5ede37e6db_JaffaCakes118
-
Size
281KB
-
MD5
0c4d99e522dd5c0292234e5ede37e6db
-
SHA1
f8e976809e0744e6ac56867448ceee9c4cc25ff2
-
SHA256
7e76cdfdaa2fa92e11d0ec2ff089af3faaa985b87bf160ccad6400f748060f5b
-
SHA512
abafa0215de0fb0eb7bc4efa299484defc3b249c3f3f9dd615b6d9ed5aae7e5da1be89a601c944be6584018d6c9a4df4f1247b299f2ee07d18c36709f18a2481
-
SSDEEP
6144:5XflardQuBAAo06dnhDcuFqh94Uw0kw9eYv/j0dbrL0cZEyKZNvdI:5vYrRP6dnhDcuFg6TKFGzBcvm
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c4d99e522dd5c0292234e5ede37e6db_JaffaCakes118
Files
-
0c4d99e522dd5c0292234e5ede37e6db_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 287KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE