Behavioral task
behavioral1
Sample
3c1fef53ecfde441b199ce5c8c5342ec_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c1fef53ecfde441b199ce5c8c5342ec_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c1fef53ecfde441b199ce5c8c5342ec_JaffaCakes118
-
Size
462KB
-
MD5
3c1fef53ecfde441b199ce5c8c5342ec
-
SHA1
df15b1af98082fcafb42dbd45bea357a2580521d
-
SHA256
93d9dfc1bb2b7174ed336d42519f5803105542f3af76ade88f8aa2e57ad556b0
-
SHA512
cdb43c30b002cebe35b26486163d4cd6032e863e71453fb9d207297c1a1af7381a2779b780fcbda5b3f24f626c705dc04b134b580740ae079594dd4d4e909733
-
SSDEEP
6144:7Sl182SYy3gnmRQzS94ZezDap8S5ejvhtC/t3StQuQH7hMPzgQWiG3pbgIZXvLEx:L2Rw4U4Zd5Cvh4duQHlMrNTQbDvgA+oa
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c1fef53ecfde441b199ce5c8c5342ec_JaffaCakes118
Files
-
3c1fef53ecfde441b199ce5c8c5342ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 461KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE