Behavioral task
behavioral1
Sample
322eba42b63e3a1a7eb3cbd44280b4df_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
322eba42b63e3a1a7eb3cbd44280b4df_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
322eba42b63e3a1a7eb3cbd44280b4df_JaffaCakes118
-
Size
140KB
-
MD5
322eba42b63e3a1a7eb3cbd44280b4df
-
SHA1
7f511f4df6db9c330fc272325167c88fc6a9c3f4
-
SHA256
d8349219e78a8307b8d2057d87636f57f9055b37a0fd127260ae50b7b87950b5
-
SHA512
e58328b1cafff9b46fb77ec3e7c861bb0ce8608bc18dbadab4b16467795dabff90b8b80c210714f9371e46c535cf77c8ee3882bf728c59114f637f28e08f7895
-
SSDEEP
3072:M7JWoZO7ydygUJLUJlbMh0Nz9UDzoGSorfToBy9wttT629sEtyR:M7JWoZO7ydzUJnGIUGSorfT4yatJfvtW
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 322eba42b63e3a1a7eb3cbd44280b4df_JaffaCakes118
Files
-
322eba42b63e3a1a7eb3cbd44280b4df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 35KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 385KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE