Behavioral task
behavioral1
Sample
355658891e31935f3a669bd4ff0b0103_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
355658891e31935f3a669bd4ff0b0103_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
355658891e31935f3a669bd4ff0b0103_JaffaCakes118
-
Size
766KB
-
MD5
355658891e31935f3a669bd4ff0b0103
-
SHA1
37d945825dfaf9dc81694b74e8d381a240c7edc4
-
SHA256
9a5830cd5b871392f62838eac5fafe0edf335c79e4f2e011140782e64f187622
-
SHA512
ca3d711a6680df56281e4fe52e67ee745a9d3a61cc7f84f25a5ac4fc9181c1b56a96700aa2c5b02e1f69b6932fc291f17f395afadcbfd3845c35d3ddcfcecadb
-
SSDEEP
12288:VPG/eA6Y/AI6iDo1YhMUVajvFe/x6emj+sEL38PRN9HyefxPef:V44IJk1FUVacx6emysXPHNC
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 355658891e31935f3a669bd4ff0b0103_JaffaCakes118
Files
-
355658891e31935f3a669bd4ff0b0103_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 689KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE