Behavioral task
behavioral1
Sample
35dbe385e70374ad71daf3277e82bd4c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35dbe385e70374ad71daf3277e82bd4c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35dbe385e70374ad71daf3277e82bd4c_JaffaCakes118
-
Size
672KB
-
MD5
35dbe385e70374ad71daf3277e82bd4c
-
SHA1
61069b6e023e0f89d42bd57f410b100f513f8512
-
SHA256
49a3c0eb1d72b7d609f0ecedb61a37a8cd4291deea574e5c1489dd47dd276f6f
-
SHA512
2d75f05e346ae8bf6a14cea287e59d910f65a0cf563cca9612c7f1a1f57bcbb6c178c341ec092e862e0c654e55a934db9f3a04d18d13ea3df32a003f1c2830da
-
SSDEEP
12288:1CtJ5MpLOQ/2e35NtgGOjuF16E5ACTCXGXukpX6PrProfg+pDDjG4l0gOS/:1aJ5yL7/HNm3+8UiGLQTrRWz1OS/
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35dbe385e70374ad71daf3277e82bd4c_JaffaCakes118
Files
-
35dbe385e70374ad71daf3277e82bd4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 44KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 620KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE