Behavioral task
behavioral1
Sample
632ce3e59648be489e66cde19d13ba80_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
632ce3e59648be489e66cde19d13ba80_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
632ce3e59648be489e66cde19d13ba80_JaffaCakes118
-
Size
287KB
-
MD5
632ce3e59648be489e66cde19d13ba80
-
SHA1
1a4820a52afb0faf0eb47a31aac6457973dcba86
-
SHA256
7657edf89f3d62760ac387859b4640a97599f15403643d2c321f0dad9e820068
-
SHA512
aee97f69c2c1a2226e3f8b083b74541460327023921c3c6bbcb7e63030c8fcff20a97415dc749755a2a31b7b065eee2725c12d74f7c71db298d38cddedd3e71d
-
SSDEEP
6144:R4x/pV1c1HrC4H+iLAVx47XjfNq7albVSr/elVW+SIs:6xv1cVm4eXiY7Gbor/0kUs
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 632ce3e59648be489e66cde19d13ba80_JaffaCakes118
Files
-
632ce3e59648be489e66cde19d13ba80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Themida Size: 512B - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Themida Size: 286KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE