Behavioral task
behavioral1
Sample
3666a5caad40d07a6b96e791d8c91b93_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3666a5caad40d07a6b96e791d8c91b93_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3666a5caad40d07a6b96e791d8c91b93_JaffaCakes118
-
Size
1.3MB
-
MD5
3666a5caad40d07a6b96e791d8c91b93
-
SHA1
5de74734020a96ede8a823e535f0fb7a709322c5
-
SHA256
6af34041f3074710913dc4d0b84d3e78b643bc47f7ce8f40fc7862d17053cc06
-
SHA512
70cb4145e415c9c193e5914386dcb144fdb528a133fba784b5dc62ba5ec56a3981e0485be3d737cb0ab3edec23785a9e96be1d0b3fa32a7210d2339f7a4af9b4
-
SSDEEP
24576:ZbK5AVKfoBwDF1Gc2WOqP6PTH1thw6mmX2Lp5j4D4qmLRc+buwpROt2sF:ZbK5AVKf5GrW8j9mnvSbmmR4ROA
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3666a5caad40d07a6b96e791d8c91b93_JaffaCakes118
Files
-
3666a5caad40d07a6b96e791d8c91b93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE