Behavioral task
behavioral1
Sample
15514fa879ad5fe131705b17d006ff20_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
15514fa879ad5fe131705b17d006ff20_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15514fa879ad5fe131705b17d006ff20_JaffaCakes118
-
Size
97KB
-
MD5
15514fa879ad5fe131705b17d006ff20
-
SHA1
575fa384a579ec37e0a37291a9d1c109cb2dff9e
-
SHA256
1c3b5779100ee2e178f357f437bec788b1ff480ff4bd033b776f68b4369119fb
-
SHA512
c11719430e0fc8eb5a2d8f3fe52d3a2c20f96eb53d7295b4d24f430358dfb066adf57ce2a5313e97667f00ddd5c02acb63d07ca6417f0fe256f94997763b9843
-
SSDEEP
1536:jVeqRhGzSwdnP4H4rjLK73fxb205/kXqKUwtifMMzcPmI0xwbL9xU/vcGB1UH9:jVjhGdJxM3Z1/2q3wNPm4L9uHtB1i9
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15514fa879ad5fe131705b17d006ff20_JaffaCakes118
Files
-
15514fa879ad5fe131705b17d006ff20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 932KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 700KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE