Behavioral task
behavioral1
Sample
39ac8fdbdea01dd34bd0d87ce3725323_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39ac8fdbdea01dd34bd0d87ce3725323_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39ac8fdbdea01dd34bd0d87ce3725323_JaffaCakes118
-
Size
1.1MB
-
MD5
39ac8fdbdea01dd34bd0d87ce3725323
-
SHA1
952ccfbb1b227d713c4b6e01704af78a9c431143
-
SHA256
f859efaa60a70fcca8a262eb295e6b7dc214da03b389b5108b91493d709710ea
-
SHA512
c44c72b6ecdb017a750aa67d28a9a169c16558e4067a18af7f798663efc0c5046472a04fc1407e55a0d5bf129c105f64a6aaef8e295a8a30f3c61551227acb75
-
SSDEEP
24576:dI6bPkR+cT6/IdXKE+uKb1bsEPz5pEO2kkMnf9M2QLVWMPrTMeZ:WicR+kwIdCt1NpE/RMlM3VN/Mq
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39ac8fdbdea01dd34bd0d87ce3725323_JaffaCakes118
Files
-
39ac8fdbdea01dd34bd0d87ce3725323_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE