Behavioral task
behavioral1
Sample
22e2417580972409d8f922a21591351f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22e2417580972409d8f922a21591351f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22e2417580972409d8f922a21591351f_JaffaCakes118
-
Size
764KB
-
MD5
22e2417580972409d8f922a21591351f
-
SHA1
c81c505e9c01ade0b57b082b172180b4fa0f6ef3
-
SHA256
a7ea26614a7a476aec0c5a83b8084a2248a22e537c13e24cd9b7ec51973010dc
-
SHA512
cfcda898fbdaaaad90620012930df9376ae789a0a8a28781d1fc316bb5a5dea5e3d01fb4452391c39668b69e41c2e36f79543a25856fa46ce87108b298282840
-
SSDEEP
12288:nX8IhZvxziJNuq9r6RHPL9Iq8ZeBOn92dDhFngTS9EBAlF/4gFrkVr7p5:X8IHxqNiVZIWBO92dgTSU2/4Kr4r3
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22e2417580972409d8f922a21591351f_JaffaCakes118
Files
-
22e2417580972409d8f922a21591351f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 82KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 834KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE