Behavioral task
behavioral1
Sample
47bff5eead00e99740ab37a909ecd000_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47bff5eead00e99740ab37a909ecd000_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47bff5eead00e99740ab37a909ecd000_JaffaCakes118
-
Size
1.2MB
-
MD5
47bff5eead00e99740ab37a909ecd000
-
SHA1
33ea6246bf4ba5c20f70e3ea69073d68f3fa5d65
-
SHA256
33769bee3cff2abbc7fc9233ca7dbda37f65a120e74f880e4d2401ce05fc6e84
-
SHA512
07b1592114f096ecdb788fbc651bcdbc77f51cf3a2bd88760af066471a65f0537c25a1a684cefbf0327240fd9496025ae9d56fc47afef0db3716b79e3c3741fc
-
SSDEEP
24576:mofW7I5htolosQ7D2M0BC2ZkzbpIQwmSy2GpEbfXr5qjgQ6QvGWLv+F:mN7hlosgCn5Zmlw0e41JFj+F
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47bff5eead00e99740ab37a909ecd000_JaffaCakes118
Files
-
47bff5eead00e99740ab37a909ecd000_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE