Behavioral task
behavioral1
Sample
21634fe6e172dfdff8af0f78a7d5a726_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
21634fe6e172dfdff8af0f78a7d5a726_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21634fe6e172dfdff8af0f78a7d5a726_JaffaCakes118
-
Size
1.4MB
-
MD5
21634fe6e172dfdff8af0f78a7d5a726
-
SHA1
1fe1f442498380c3c54352421b392a6bd27e4f9b
-
SHA256
f7596e90f8d0f854141063e74b0177a9216ab26416e4a1ced6c61100b75d18c2
-
SHA512
89425a42fa5e4c4e0bc23a2cf2dc6181027f556f6c51a9212aeb1838d1525a8eaf8983413a97487ae05c94a3a67b0e2010653d4d27bb6660e52d7e0c145f6ff2
-
SSDEEP
24576:WdOAKSVGndSDu+4ZYBcwrjIC8AKUgOV0JC59ceU9fOsCtM0sq:WdOYcnYDIYaC8JwZtsCtNs
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21634fe6e172dfdff8af0f78a7d5a726_JaffaCakes118
Files
-
21634fe6e172dfdff8af0f78a7d5a726_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 164KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE