Behavioral task
behavioral1
Sample
2de0efe689b0695fa5655220e3e0a08a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2de0efe689b0695fa5655220e3e0a08a_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2de0efe689b0695fa5655220e3e0a08a_JaffaCakes118
-
Size
1.5MB
-
MD5
2de0efe689b0695fa5655220e3e0a08a
-
SHA1
13c2e0cf1f543f122f4868f7c6b279c03acda13b
-
SHA256
dae290455b5a97c8bc2ab66666fe2398204a5c12770e5205db052a37594cec17
-
SHA512
c54bf1db37ec6b7f16a8fd3482da7913f9e67b22303f594b0f085d294952217cd6a37b4c9c35cf108547289bee4ae09ac05b8769660e0a4cd83b03a5b4e39cf3
-
SSDEEP
24576:v74FoKd16XC+k1cap8U6Uz/f3FymnB8FlLLCHobQlLxwmvliUKP1x1o1t/bzYFdk:j4Fn16Sduq8EHnB8FNCH5lNBvlvKPa9q
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2de0efe689b0695fa5655220e3e0a08a_JaffaCakes118
Files
-
2de0efe689b0695fa5655220e3e0a08a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 313KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE