Behavioral task
behavioral1
Sample
22ddce2fbf09dda24c3dfe544732e9ae_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22ddce2fbf09dda24c3dfe544732e9ae_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22ddce2fbf09dda24c3dfe544732e9ae_JaffaCakes118
-
Size
380KB
-
MD5
22ddce2fbf09dda24c3dfe544732e9ae
-
SHA1
a60515d7233c4f339e2e746e28b39872dfa27644
-
SHA256
815021f67c56103d3dbb19c1d52e08eb27a9343dd9e8fd84f177f58a2489a85b
-
SHA512
1b6942cefac4ee78dfac9b0aa8110d38584fb3b7a0e163cc8cbd6c5c5ba0725d211759e2dc8c4f7abeede985b095086cded974505d939d769db833af4b1d1e15
-
SSDEEP
6144:2B2jWLdFlQVQ1hF8jkVH0J29FnypF8YEiQXsnF+Cmj1lR11SGXiJK8cSPlpQKAad:y2iLdHsQnF8jk508953ilFs1lRDSGQlp
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22ddce2fbf09dda24c3dfe544732e9ae_JaffaCakes118
Files
-
22ddce2fbf09dda24c3dfe544732e9ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 35KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 349KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE