Behavioral task
behavioral1
Sample
2cec4d2cc2bf216f7d34fd1966ba1f7b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cec4d2cc2bf216f7d34fd1966ba1f7b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cec4d2cc2bf216f7d34fd1966ba1f7b_JaffaCakes118
-
Size
4.6MB
-
MD5
2cec4d2cc2bf216f7d34fd1966ba1f7b
-
SHA1
28d43d539c5d35da8124ab94c33f12392da145de
-
SHA256
1bebc34415283f0981916f93bee537f97bfc6a43c87a106c0f5c65bf00ea9d7f
-
SHA512
86f402c1a8847d422e7f89b877141bff73faae7bd1cccbe50da0ec8e72fb8e399631217750dc4834149afe6802383bff6cd570a15050c1a2483e55c14f01917d
-
SSDEEP
98304:AUT6xh+USna6E9KWlCXZOVeTLf9LCe1qFJ/ewi04n1yen/YXaDI:g+USng9Ke/VeHqD/ewi04nYe/YX0I
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cec4d2cc2bf216f7d34fd1966ba1f7b_JaffaCakes118
Files
-
2cec4d2cc2bf216f7d34fd1966ba1f7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 414KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.0MB - Virtual size: 12.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE