Behavioral task
behavioral1
Sample
65dc1461f693bafaf3b84c2028531ff6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65dc1461f693bafaf3b84c2028531ff6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65dc1461f693bafaf3b84c2028531ff6_JaffaCakes118
-
Size
433KB
-
MD5
65dc1461f693bafaf3b84c2028531ff6
-
SHA1
af5a6a1c8c60af1741f695af23fec7c963f0c6c6
-
SHA256
486302a91d256e038a6664c583dd2d42b31ea2b0fad65f9159e5bbcf328fe3ba
-
SHA512
25de4103873040d321be33857e6fdf3971789fc65e9fa840cee13a212dfb0dbeb1f9ab1a561faae90ef56e1cb5134f71b3f75fe8e433ffa31a0050c49487a865
-
SSDEEP
6144:RmTA3T5eR2mR2mAzGl/NmcQ4/9kP3uRp/XHpPG/M1+I3WfTwarVEneQaq2:RGAD5aPA6Db/96+bH3+IGbwaweQu
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65dc1461f693bafaf3b84c2028531ff6_JaffaCakes118
Files
-
65dc1461f693bafaf3b84c2028531ff6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE