Behavioral task
behavioral1
Sample
64df3f598c96c7fce4efdf585292fc1e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
64df3f598c96c7fce4efdf585292fc1e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64df3f598c96c7fce4efdf585292fc1e_JaffaCakes118
-
Size
356KB
-
MD5
64df3f598c96c7fce4efdf585292fc1e
-
SHA1
0d3eadd292a5a8d2b898f36a5a8d1b04314ea3d9
-
SHA256
57ed57b65bb8852cba30a06d96da2142f744cdc49d090570cfbeb087ed43c9da
-
SHA512
614713f4e7ac25f4a76d3ce9c1878849eb2297552c03780d124c6c3cf24338353fb60078ba8c3f8dc7c47f61ed4d4ec966c3176a7ead17e9f0fa2de9df3e17d6
-
SSDEEP
6144:IkoFs+DfglSe11ECXpetoz+b3rf0HdaRYC3MkwzlgLFuevfOVy0emNlqgGnxGLv8:vcpASeDXCbOdaRP8Jz2uzTemNlqU
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64df3f598c96c7fce4efdf585292fc1e_JaffaCakes118
Files
-
64df3f598c96c7fce4efdf585292fc1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 328KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE