Behavioral task
behavioral1
Sample
347b6f9bcc7caebf48258f12c97db208_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
347b6f9bcc7caebf48258f12c97db208_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
347b6f9bcc7caebf48258f12c97db208_JaffaCakes118
-
Size
1.1MB
-
MD5
347b6f9bcc7caebf48258f12c97db208
-
SHA1
1b69a75f49fdb12dee65953b82cccbcd87c3e815
-
SHA256
6e3374ec4ee2ca6b7b3e31617570709e784d1939b0171d144e5fe721dd2c15ce
-
SHA512
3f09a4d7c858d6149c0f5acec588b8af49574e4df394cfb4da8f559cff31d698c69dbe58b04606263c34850f7cd729a52a01058d35b7da88eb0e3b9279208623
-
SSDEEP
24576:T3TXNdiaWFr9rB/Rk66n4/NpK2iXyKmBcI14XTGbb:rTNYR9I9YKlXyiI14XMb
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 347b6f9bcc7caebf48258f12c97db208_JaffaCakes118
Files
-
347b6f9bcc7caebf48258f12c97db208_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE