Behavioral task
behavioral1
Sample
2833688dfd167a5359806b9d11686586_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2833688dfd167a5359806b9d11686586_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2833688dfd167a5359806b9d11686586_JaffaCakes118
-
Size
1.8MB
-
MD5
2833688dfd167a5359806b9d11686586
-
SHA1
cbc3563df778d91f2f9cfae3c77d4dc3dca05215
-
SHA256
a24b9bbb319d734f2fb00622b4ed703e667628b7b0f90a293d952af88c915d80
-
SHA512
d5639f859de5089f4ab59e355452389584163438ccbfc931f3316341ec504b2f120c1743ac905c537e90da4afbe836cf146329ae40117b11301da6186a93d8d4
-
SSDEEP
49152:4zJ0LfN5GUM2D7VtifwEeGoWae3HyHXhWMbD:weLfN8/4yyGoTe3YXsy
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2833688dfd167a5359806b9d11686586_JaffaCakes118
Files
-
2833688dfd167a5359806b9d11686586_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE