Behavioral task
behavioral1
Sample
3b4f3ace67e510625837bd9bbfe81638_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b4f3ace67e510625837bd9bbfe81638_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b4f3ace67e510625837bd9bbfe81638_JaffaCakes118
-
Size
1.1MB
-
MD5
3b4f3ace67e510625837bd9bbfe81638
-
SHA1
308e1304eff4279c0b59a82d8ed2b920a879a3da
-
SHA256
935f62cbc32bc8e67a3afcfeacf8cedb0e586c880a9c7ee9d3c7f167d5f56631
-
SHA512
9e60ca3c1bce8b022a62368a8a5d11be85f91531c9589a0f1d5e5c72f3b54ba0fc22f0bfff0330dc950cb2d0b174b4b3509ce64ec5abfc85ec9812e12c5e1c92
-
SSDEEP
24576:5hY9YQWAz7E39PIXYqNFNn9j9/Z9HZENipa:vi1z7sqhnDvZ9a
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b4f3ace67e510625837bd9bbfe81638_JaffaCakes118
Files
-
3b4f3ace67e510625837bd9bbfe81638_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 46KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 970KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE