Behavioral task
behavioral1
Sample
67f2601d9056a35c95df36337d8dcc71_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67f2601d9056a35c95df36337d8dcc71_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67f2601d9056a35c95df36337d8dcc71_JaffaCakes118
-
Size
3.3MB
-
MD5
67f2601d9056a35c95df36337d8dcc71
-
SHA1
1495ce763ec98ab9a5d10e7d7bd98cff7fc89171
-
SHA256
5db336c552460b77f8bff10cb36499f9d9ae429f10a1f032555c1e8ea3e62775
-
SHA512
0e5570b77322a163bf7846f03803aecf3be806f8643456e6cc3037e48a0b064a4e85e9397075a6766f0659dcd340bbbe7ecd6c9099ebf1e0f472f5a6a802e847
-
SSDEEP
98304:8Io/8FY3XjbHknFBiNSqoQ0mlQg98e8ASHMT:hoUi3XHHknfS4QEg98nsT
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67f2601d9056a35c95df36337d8dcc71_JaffaCakes118
Files
-
67f2601d9056a35c95df36337d8dcc71_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 371KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE