Behavioral task
behavioral1
Sample
2d09e79f73e2c5d55d886cb1992d8d99_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d09e79f73e2c5d55d886cb1992d8d99_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d09e79f73e2c5d55d886cb1992d8d99_JaffaCakes118
-
Size
1.9MB
-
MD5
2d09e79f73e2c5d55d886cb1992d8d99
-
SHA1
3b4d0e3f41f0fb972d83bbac4e27b10512ef4199
-
SHA256
cc270211ce08b1714a25f73cc2391acec46b4867bc580c19a5e6bfb0763e9a10
-
SHA512
03257b8b747ddaf254b73a6514968529d701927ce4d5ff27bc3640f053634921e98648a08a3ab45cb550e46ade778d3332046a590fdf999944f5b89a130199a5
-
SSDEEP
49152:I85oGW02ALTZ03xi/1ezkUwC4zlyNC2IY+Fv:PW9ALd0Owzt4zlyNev
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d09e79f73e2c5d55d886cb1992d8d99_JaffaCakes118
Files
-
2d09e79f73e2c5d55d886cb1992d8d99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 18KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE