Behavioral task
behavioral1
Sample
62479aa83686eb630f188992d4da16fe_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
62479aa83686eb630f188992d4da16fe_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62479aa83686eb630f188992d4da16fe_JaffaCakes118
-
Size
418KB
-
MD5
62479aa83686eb630f188992d4da16fe
-
SHA1
431d3bf7cb36993d5fa8827e6225a358be9b8f75
-
SHA256
ab9423e1b3777431b604c3eb784ab082299f0236ee3d9c16a3f2e9f407a5907e
-
SHA512
62e5f10420ccb68e78575c4cb9a9175163eb943a1017b34d74ff868090e8c3d916e96dec06345c289a27d8f892dcc3b3c10bcd41c5e13e5e644cb4a6c3ff5263
-
SSDEEP
6144:oMZmU9HP/iT92FOyi6W9bnEbXhktJIDUbG1COwTwdXdG2tgm3i:oMZD1O2FOyziEbRkIDUbQCdTwdXdd+Ui
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62479aa83686eb630f188992d4da16fe_JaffaCakes118
Files
-
62479aa83686eb630f188992d4da16fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 52KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 356KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE