Behavioral task
behavioral1
Sample
49d6940656908920969f5cf6d54333e2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49d6940656908920969f5cf6d54333e2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49d6940656908920969f5cf6d54333e2_JaffaCakes118
-
Size
1.7MB
-
MD5
49d6940656908920969f5cf6d54333e2
-
SHA1
877221eb8e228597e732b2814d8de80873201e9f
-
SHA256
26c26501048bee9695b0edd735b2bf7fe69dd04ec8e76c348317e0f6712e7553
-
SHA512
3eefe201a427463af91a8088c6e6baffb9bea591679c92c323b29f9a588e2e3bba98cd37c98367875fd3f234c02c6d15bf2e3b8ffa489aac3d8a4b253d3770a1
-
SSDEEP
49152:3uFByg720rRr6MA60Iv8weT+eFQs9xk3evXS1iO2fMY:3uF5nrRr6FIvi/as/6PD2fj
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d6940656908920969f5cf6d54333e2_JaffaCakes118
Files
-
49d6940656908920969f5cf6d54333e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 423KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 215KB - Virtual size: 546KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE