Behavioral task
behavioral1
Sample
73efb4ba45f1b4e66e7f73472abe5278_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
73efb4ba45f1b4e66e7f73472abe5278_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73efb4ba45f1b4e66e7f73472abe5278_JaffaCakes118
-
Size
1.6MB
-
MD5
73efb4ba45f1b4e66e7f73472abe5278
-
SHA1
dd652925e03e4e05bccb740040364eaaab5aeb62
-
SHA256
150b9a08b145cd1750f724cd72e11e49dc1170159b246233ab5dc5b6b41de316
-
SHA512
6726bd6702c890210eb4df51599cf8c5b19a9618c6402fd0de673a3dda22e9c7b513673cdcb32cee76a66b9731c6e3c24acb645eb645cb4b92d5f1da24fecb54
-
SSDEEP
24576:yT1zh8g8wGqIDtuAPvuGqXa+02ifTGupHbgR1MNRMLY8XXuJyefb7agk0E8mw:yewkJuivBqx02OdjRmeJySbegk0E8
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73efb4ba45f1b4e66e7f73472abe5278_JaffaCakes118
Files
-
73efb4ba45f1b4e66e7f73472abe5278_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 359KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE