Behavioral task
behavioral1
Sample
245d83a6e813f9bf70e12dc406433945_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
245d83a6e813f9bf70e12dc406433945_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
245d83a6e813f9bf70e12dc406433945_JaffaCakes118
-
Size
1.1MB
-
MD5
245d83a6e813f9bf70e12dc406433945
-
SHA1
0cd091f0974f394deb327a214292028088bb305a
-
SHA256
aebd344ef7c69a70a437db54c997c8ade6a516c88d2a2ce05df48a3b457f2d68
-
SHA512
d7eb2f18cb82a83a5b7b96373d9b21789958d700d2a471f6d61d76ede28116940c6150283a916aea50c7abee48876b7c8d088d089640edf4c69f7df901600384
-
SSDEEP
24576:VrA2+Q4FL+0cwaqG00/0thXu3dDB/E0BxORk93gz6QMWyir7iHg+8bC:9+DNAwnoEQ3XORKwz6uy7D
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 245d83a6e813f9bf70e12dc406433945_JaffaCakes118
Files
-
245d83a6e813f9bf70e12dc406433945_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE