Behavioral task
behavioral1
Sample
5c3bc8d53c0e9d09cf63738c70ab2124_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c3bc8d53c0e9d09cf63738c70ab2124_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c3bc8d53c0e9d09cf63738c70ab2124_JaffaCakes118
-
Size
1.8MB
-
MD5
5c3bc8d53c0e9d09cf63738c70ab2124
-
SHA1
61edf9acf626e30bc3d96bc2033393fa18d2a9d8
-
SHA256
12cfbf2b04f3c3bf1683ed3ac3a261873692074fd66c9c3ed1bc2f2c645df330
-
SHA512
5bae0c4871083e16777cef47ed9022ce1f447b3b7c853094c8a0e98adec1a03ed8b41d5825d42e5d231e9284b657976ed5fe212a3351c6dcafdd72f12d97e83a
-
SSDEEP
24576:9Uo3B+WTBeSI+n49GSxSzM53iYCstqX7Kuza32fQk5GnfP00c2G4nCeif0jfHoq6:9BAI4SACstqXAy/GnfP00VG5ejHfyT
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c3bc8d53c0e9d09cf63738c70ab2124_JaffaCakes118
Files
-
5c3bc8d53c0e9d09cf63738c70ab2124_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE