Behavioral task
behavioral1
Sample
615fb5d8eb89bdffe6d02a3c0fd2fe74_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
615fb5d8eb89bdffe6d02a3c0fd2fe74_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
615fb5d8eb89bdffe6d02a3c0fd2fe74_JaffaCakes118
-
Size
399KB
-
MD5
615fb5d8eb89bdffe6d02a3c0fd2fe74
-
SHA1
e8be2b1578e912201d0a754bc7279bc766c8116e
-
SHA256
cb60371e52d6e4397da3393e9dd9af2e46a8e61f64d964a45a83635446cb2307
-
SHA512
9d8915b007ea780161de46080f4cb7753dc85f4a08b34ccfa0422943f7409f901db3c32ccc0f617aae022ae572507eac8e8c8eab55d731c246497989d44128b4
-
SSDEEP
12288:U36uNa1KeHq3QTGdceomBIVz/B3or0gxpNc:U36BEXbomBIV7Z3gxpN
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 615fb5d8eb89bdffe6d02a3c0fd2fe74_JaffaCakes118
Files
-
615fb5d8eb89bdffe6d02a3c0fd2fe74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 17KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 376KB - Virtual size: 900KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE