Behavioral task
behavioral1
Sample
4751f64b68298ec4b7f2e25a2b856395_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4751f64b68298ec4b7f2e25a2b856395_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4751f64b68298ec4b7f2e25a2b856395_JaffaCakes118
-
Size
250KB
-
MD5
4751f64b68298ec4b7f2e25a2b856395
-
SHA1
c4c44676193ce85ed53a470f4c98101a5b61f373
-
SHA256
d0326244aab8aeea4356f154ed124e7708d3e4de7aa957cb16a4624a3adbaf71
-
SHA512
0da2674abd4c6c1f01c8c24680ed191d261498ea7cda8a05e582e02f265e410f6c14f0b7bcba2f21ab014ee511efb254381c2b64186984b45ee7b83a060eb765
-
SSDEEP
6144:1cUTyA5rdHzusZ4SGbn3JZm12udoRw+z21:hl5zn4SGr3JZm0udow
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4751f64b68298ec4b7f2e25a2b856395_JaffaCakes118
Files
-
4751f64b68298ec4b7f2e25a2b856395_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 45KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE