Behavioral task
behavioral1
Sample
1825fbf9c671af72ea7dd61405461208_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1825fbf9c671af72ea7dd61405461208_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1825fbf9c671af72ea7dd61405461208_JaffaCakes118
-
Size
4.8MB
-
MD5
1825fbf9c671af72ea7dd61405461208
-
SHA1
4a4fe374131bcc3d4c033f3eb53dd382b3148ac1
-
SHA256
e2ff036733d4f7dea388fafc17f294e8438d4e9d49092545ad91d1d196a93012
-
SHA512
dcd7f376f0d326724bf0e23f3a1b6216cd01570e25e1d74451bae087332f42e710e92b46b964862ba127d00d05d001ea8fdad08f67e96365b1f1a8b579dfee0f
-
SSDEEP
98304:zW2Jy7dg5cYE6fR/0T52RAgQoQGOmQDQwDVB8NFAH6pzz+:KNu5cYRfRHRAgrwDH8NqapW
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1825fbf9c671af72ea7dd61405461208_JaffaCakes118
Files
-
1825fbf9c671af72ea7dd61405461208_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 405KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.2MB - Virtual size: 17.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE