Behavioral task
behavioral1
Sample
73964062a13f2d530bad4a1d58a16f8b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
73964062a13f2d530bad4a1d58a16f8b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73964062a13f2d530bad4a1d58a16f8b_JaffaCakes118
-
Size
1.6MB
-
MD5
73964062a13f2d530bad4a1d58a16f8b
-
SHA1
dc368554003cdf2bf7a20f71527098934ae6592a
-
SHA256
ea9521fe6f393dce031d1d403558d5966d515cdd07244a824e3af63204620e67
-
SHA512
79f77a035545ddf28865f7b9d07b1ea7a25ec44375efa1646a130a39bd461d55b7648841dc32a622819d1c2aac035251d32ca128d12a064cd2b4d57c75617aad
-
SSDEEP
24576:rdvSPOywsQVZoGSwGKjXArQizlWQe/8y+ya3hIlZd+aKDwtGFmp:rdvOO/ZuujXArQgkQe4y0hsGmp
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73964062a13f2d530bad4a1d58a16f8b_JaffaCakes118
Files
-
73964062a13f2d530bad4a1d58a16f8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 160KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.4MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE