Behavioral task
behavioral1
Sample
78936b65bccdf6f958b5d9cd4b71274b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
78936b65bccdf6f958b5d9cd4b71274b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
78936b65bccdf6f958b5d9cd4b71274b_JaffaCakes118
-
Size
1.5MB
-
MD5
78936b65bccdf6f958b5d9cd4b71274b
-
SHA1
8260847a95afecc05c7a36aab366533971a64df8
-
SHA256
162b5fb3482f0ea45d38a2ac58284210ee2198f9ba55ecc819c61400bd5c4a79
-
SHA512
61ce114f5a458ae9a175543f444d9e876341789957f6374145caee3050cb5f115a3b2e467172af5729cd8390658a2c9bc7f95f06a7fe1a50a5fb099799384d67
-
SSDEEP
49152:jzxg1KUR94hGulSeG1gXx7KRn4GlXtgaJxE:jq1Kc4hGulSeF5aWWy
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78936b65bccdf6f958b5d9cd4b71274b_JaffaCakes118
Files
-
78936b65bccdf6f958b5d9cd4b71274b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 460KB - Virtual size: 828KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.9MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE