Behavioral task
behavioral1
Sample
1a42d28821ef9092b7fd40c6eb76b6e6_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1a42d28821ef9092b7fd40c6eb76b6e6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a42d28821ef9092b7fd40c6eb76b6e6_JaffaCakes118
-
Size
484KB
-
MD5
1a42d28821ef9092b7fd40c6eb76b6e6
-
SHA1
d55b23d5d966cccf60f0a617dab6581e2ea400af
-
SHA256
af1a7896238558ff4f868dc0d1c28bf6ff00b37842aae781308ec00ab86572fe
-
SHA512
67cc2dd2ff2cac505bf378321273de8650d487a1e3e361428129976dfecfb2984d21e75f2641ad6233a147195cf82f34220a77d702b5e85342e62134e7468609
-
SSDEEP
12288:h2wEQ9okfz0RYb4aRKzhXWyz8M9hOalQgg0g6TAl6s9BTFZhIXG+urop8isE:IwPv4aMzhGyz8M9/lQb0gmAl6s9XroW4
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a42d28821ef9092b7fd40c6eb76b6e6_JaffaCakes118
Files
-
1a42d28821ef9092b7fd40c6eb76b6e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 453KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE