Behavioral task
behavioral1
Sample
612b6efca2522e2e24cf72d4f9ed105e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
612b6efca2522e2e24cf72d4f9ed105e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
612b6efca2522e2e24cf72d4f9ed105e_JaffaCakes118
-
Size
1.3MB
-
MD5
612b6efca2522e2e24cf72d4f9ed105e
-
SHA1
42b1f191cc5abe28c8cbe8bad72835600dea4aa9
-
SHA256
a825bd33183f30855abda28f6103a3653b23895d930cf1552b953b78bc42ea99
-
SHA512
ff4f668b3b5cb601b507ee18d6bbed47053bced54e46f061b691fd2a35379c5682188ca8b99d18881bd21fac24295ac03b9383c59abf71fcc932cf93bc6d4ddf
-
SSDEEP
24576:iYWuGWzVk2faBi1M9NrB6NHYLAumwrhP6U7lMjmuKaDmuWHxPjZqxe1RvlN:iJutNUv7/hHejn7Oj4xCRvb
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 612b6efca2522e2e24cf72d4f9ed105e_JaffaCakes118
Files
-
612b6efca2522e2e24cf72d4f9ed105e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 104KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE