Behavioral task
behavioral1
Sample
26f9f12bbf7676fffde54daaa7fc49f8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26f9f12bbf7676fffde54daaa7fc49f8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26f9f12bbf7676fffde54daaa7fc49f8_JaffaCakes118
-
Size
1.5MB
-
MD5
26f9f12bbf7676fffde54daaa7fc49f8
-
SHA1
7b83660b0a3520918738164234fb517f99499983
-
SHA256
452815005ffc31dd156c43ea9531385743f78592de8416babd3c1e40a6fcfea8
-
SHA512
899c0ce537e38194a16fa77917441e6b4e85c54ba822588360788019e95766178b2f60047306ad7613f831875de27d1468aa84ef833f478a3bfc4be515df6da1
-
SSDEEP
49152:CHFZqy5vFFlKPPxm5KkpuxanUE1Vkb0UNbtD015:eFJ5I85KaOanDVtytD015
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26f9f12bbf7676fffde54daaa7fc49f8_JaffaCakes118
Files
-
26f9f12bbf7676fffde54daaa7fc49f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 14KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE