Behavioral task
behavioral1
Sample
498b3a9ea403606b81a57cd6750b7cbe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
498b3a9ea403606b81a57cd6750b7cbe_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
498b3a9ea403606b81a57cd6750b7cbe_JaffaCakes118
-
Size
1.1MB
-
MD5
498b3a9ea403606b81a57cd6750b7cbe
-
SHA1
7f5dee676a05e2c4639b2ff3dc76d057e8bebf46
-
SHA256
56d6df95ff52d318648a64b719a30c5fdb97fcf18afa0e6e30dd7529fe462b52
-
SHA512
0c3ef76f535a33850b2176c5a18efcf66f320e934a610170bc3e835770a87842456bd4327b77603b92975ee455b94b92d2677938cf718c159fcf8b30b074c82c
-
SSDEEP
24576:NCdeNeal73YCHsePocVb3fxuuQXP86L++9lLhqlkdJUgWWLChHtv:NCHaljTH7PoibvGXPjLjlhKknWMChHtv
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 498b3a9ea403606b81a57cd6750b7cbe_JaffaCakes118
Files
-
498b3a9ea403606b81a57cd6750b7cbe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE