Behavioral task
behavioral1
Sample
72ee2cd1c34076317f998be4ac91fe86_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72ee2cd1c34076317f998be4ac91fe86_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72ee2cd1c34076317f998be4ac91fe86_JaffaCakes118
-
Size
667KB
-
MD5
72ee2cd1c34076317f998be4ac91fe86
-
SHA1
bb037c2bc17b4fcee5f84d19d9c7e10bc9a4a467
-
SHA256
982e47fd0527623c9a8906a22f7981135d6b117a22d3f8eabaeb6ed7d5cdc973
-
SHA512
8f3700218ddc2f7d16c5817092b501cfdc142fe9a9530ab24395d1fb804f34a70aa3a10417c02a553eb4ffddcd2395fd70b0d9fa6d293a03dd1a305f1fb5ca05
-
SSDEEP
12288:S7pr0l2bkM+pcmGbiv4zC+zpAtc4FwqU+3Wp+9hnsDb7rCkYdlzyd3nqJANuM:SNrA2scXbivYCNtLSqU+Gp+9hnsDbikD
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72ee2cd1c34076317f998be4ac91fe86_JaffaCakes118
Files
-
72ee2cd1c34076317f998be4ac91fe86_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE