Behavioral task
behavioral1
Sample
425981991c3ab6a8f278ee5b92ab5f1f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
425981991c3ab6a8f278ee5b92ab5f1f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
425981991c3ab6a8f278ee5b92ab5f1f_JaffaCakes118
-
Size
1.6MB
-
MD5
425981991c3ab6a8f278ee5b92ab5f1f
-
SHA1
e5318a4c8d3f70868c92b29031dd63a0aa45d466
-
SHA256
c403f1f04b1f9258f00793f6f6991cc6740ca2508bd3cd3647ad14bc511afe13
-
SHA512
f678d6382757b0c25d5580ab9fc985d48ea534df6e0bc34b6421fd8d09f43efbf964b335f0c0c2e940898267d87afcc7847e7effe528d710dcb8a35df008d76c
-
SSDEEP
49152:abec+XmZ6Ug9SowIJiElwu/15N6Ut0dmAFQCZ7+Ey2BA4V/:aqCLg9S5IJiLu95VtQmUQc7Ty2b
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 425981991c3ab6a8f278ee5b92ab5f1f_JaffaCakes118
Files
-
425981991c3ab6a8f278ee5b92ab5f1f_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 23KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 379KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE