Behavioral task
behavioral1
Sample
700271ae0d498209d92791e0e3737ed3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
700271ae0d498209d92791e0e3737ed3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
700271ae0d498209d92791e0e3737ed3_JaffaCakes118
-
Size
3.8MB
-
MD5
700271ae0d498209d92791e0e3737ed3
-
SHA1
3afb6ce7323c45be000a61e29d625c1754f79088
-
SHA256
2f1624056a457606f6baa8fcf204176c1ee538e6b9f986a675c2c6786cb6f38c
-
SHA512
835489425b1a11e87f28c6a723ee09218166dd2c0a4c36e357bda4ed8dea06101281be7dd6d21ea0944891ca1203e028020dcff29a9526296c9ba3b1b7e8da8a
-
SSDEEP
98304:WDxxFY2GRq0BNiuolHNa1z/ny3y8u1jXTDF:WDFUq0OuWg9su1/h
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 700271ae0d498209d92791e0e3737ed3_JaffaCakes118
Files
-
700271ae0d498209d92791e0e3737ed3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 412KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.0MB - Virtual size: 11.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 384KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE