Behavioral task
behavioral1
Sample
18d29c2e6a6bb614053417f6d1d6f2f5_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
18d29c2e6a6bb614053417f6d1d6f2f5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
18d29c2e6a6bb614053417f6d1d6f2f5_JaffaCakes118
-
Size
1.3MB
-
MD5
18d29c2e6a6bb614053417f6d1d6f2f5
-
SHA1
ae8b6bdb853b49d76f5f59598d29e0ce30ec55ed
-
SHA256
71f159139ef4388bbd96cb75e47729a184927b59ecc08abaaf0b63740be61c33
-
SHA512
d65c9257a60dcb435bbe0f41288c9e09508e3a69409228d0981b55416ac660e1cc481b08e3e028d95135759b34241bc3451c2953ad732ff9b17445e4ec25f370
-
SSDEEP
24576:8fz4vEYgdaamLf9P0D9U1pP4b5estljnmU/4E3wqHazBhD1l:GzhYgdap9jpPu5XP7/MXDn
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18d29c2e6a6bb614053417f6d1d6f2f5_JaffaCakes118
Files
-
18d29c2e6a6bb614053417f6d1d6f2f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 92KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE