Behavioral task
behavioral1
Sample
4c1dc0dbc355ece524bcf9787a3d3aa1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c1dc0dbc355ece524bcf9787a3d3aa1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c1dc0dbc355ece524bcf9787a3d3aa1_JaffaCakes118
-
Size
1.2MB
-
MD5
4c1dc0dbc355ece524bcf9787a3d3aa1
-
SHA1
5952a617302b9d0e02aa8900aed1c34fdc5c21cf
-
SHA256
407dbac4e4037ac000538f5e3f7b18c7aca33b2faed2f74ed1ec2026fb16557b
-
SHA512
94649a9f1841e014482937a4971cd8c9ee6beeb0354cdd42994fef7c0cbaba1e26529f8c080306514ce95b9759aab700139785edaa4c2739e0acf2e57ca0c4e3
-
SSDEEP
24576:dog0FoC+yx3/s+c+rCHgt9PJ+C5CSig7I6L5+FGRUxIk52j:dohFoMxvs2eS1JH/153RUpoj
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c1dc0dbc355ece524bcf9787a3d3aa1_JaffaCakes118
Files
-
4c1dc0dbc355ece524bcf9787a3d3aa1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE