Behavioral task
behavioral1
Sample
26017143e0d458c8ccb0533e849d6d43_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
26017143e0d458c8ccb0533e849d6d43_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26017143e0d458c8ccb0533e849d6d43_JaffaCakes118
-
Size
63KB
-
MD5
26017143e0d458c8ccb0533e849d6d43
-
SHA1
8fcd0bc6e801e72b83072bdc8822d384000e05b2
-
SHA256
2e1d5c4cd90b4c3a30e294330727aea200efc3842676e84904f2edce4fa351d9
-
SHA512
67616c411e22e708c00fa9d7b73456c8e3067c359372fb356fa6d57dad49c592a6a4de3c9563c7524303f8c722365e34d50d496891528026f08cda9d5eafbc29
-
SSDEEP
1536:E8yh6I0+5KOM6rb9KeJzCfwxvgHrWs8tpSN6bRAW48IIt2NxKKD5jVZr0PiZ54cb:Ekf+5Dpb9KkfvgHSs8tcNeAW3IIdKfZF
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26017143e0d458c8ccb0533e849d6d43_JaffaCakes118
Files
-
26017143e0d458c8ccb0533e849d6d43_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 399KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 286KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE