Behavioral task
behavioral1
Sample
3aa93d1161d9eed2765c02f82dd1b34f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3aa93d1161d9eed2765c02f82dd1b34f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3aa93d1161d9eed2765c02f82dd1b34f_JaffaCakes118
-
Size
6.7MB
-
MD5
3aa93d1161d9eed2765c02f82dd1b34f
-
SHA1
5754d2c402c3250657e53ceb1ea31bb4ce49a125
-
SHA256
00eb867dfdd2d2799cbe5c8d9b3ff3901ad36b608e38f8f8da2c948eb8ca7f50
-
SHA512
5c6b91e1025f524e2be91f5cb3801edb28c1c66e774b893c00104b92ccf9b513c33b31e31258e8f71d8efcf5309783311741b440e85947d981d32c212c0f8aaf
-
SSDEEP
98304:B+vSbSHZqulO31N8hY1V2SnSE4640IfA7mDyKhfFvtSQZrS+mt:B+vSiE3trfnTj4bA6X3tFZrS+K
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aa93d1161d9eed2765c02f82dd1b34f_JaffaCakes118
Files
-
3aa93d1161d9eed2765c02f82dd1b34f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 462KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.1MB - Virtual size: 24.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE