Behavioral task
behavioral1
Sample
66e23b1adc1e2d5e0fc2087a8b74f770_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66e23b1adc1e2d5e0fc2087a8b74f770_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66e23b1adc1e2d5e0fc2087a8b74f770_JaffaCakes118
-
Size
1.4MB
-
MD5
66e23b1adc1e2d5e0fc2087a8b74f770
-
SHA1
01a85708c38a996873bb8a512a6dbe50da9bd947
-
SHA256
dd9d67365fae882d1df08d0ab7717271d45b9ceacabd2c0cfa0a3d08f911a9df
-
SHA512
397a8f355184846ba4d43c99b489146ed9206684cd1a6aa4c7e397c66b896451acee17f0e9cc2b58dbb7fd3924290608f8918d9bb61fd245f0c9769b4a6108fa
-
SSDEEP
24576:w21E7Jdma/WMV3AKhXUst1jQGPLECZL88f7vVBePoMci+Rk+YgpFH:w21EUa/xAqFt1jLNZL5VBkT+d7
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66e23b1adc1e2d5e0fc2087a8b74f770_JaffaCakes118
Files
-
66e23b1adc1e2d5e0fc2087a8b74f770_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 177KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE