Behavioral task
behavioral1
Sample
3ee9015550aba3b00ab375856eddef66_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ee9015550aba3b00ab375856eddef66_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ee9015550aba3b00ab375856eddef66_JaffaCakes118
-
Size
1.1MB
-
MD5
3ee9015550aba3b00ab375856eddef66
-
SHA1
45564deed23a738f414fb61eed85dddb292bfc56
-
SHA256
73e4a1c5e06bea4714cc6868d6dd221616bf713ca290c10d0b98541b4cf9e071
-
SHA512
179b326ef9f1eeffd27a067536d5f00d7c7d3f7778874b22114840f43a4dae9888e2d5eaee900b6bf18f2cee56dae4ba5802c430e399b25e8928a91bd838a17f
-
SSDEEP
24576:JqMKAQ6IoHl2621wLVhlecaS0ObwGguEftV0ZMn5/UoF4l6UIhXZTf:J7TOoHl32krUSBdEfXaM5/UGtBf
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ee9015550aba3b00ab375856eddef66_JaffaCakes118
Files
-
3ee9015550aba3b00ab375856eddef66_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.0MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE