Behavioral task
behavioral1
Sample
877ff5f9b6e0f396a4334cc896bcd2f4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
877ff5f9b6e0f396a4334cc896bcd2f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
877ff5f9b6e0f396a4334cc896bcd2f4_JaffaCakes118
-
Size
1.1MB
-
MD5
877ff5f9b6e0f396a4334cc896bcd2f4
-
SHA1
038b28ff493a969e6655ff51ddd26bd617b25f0d
-
SHA256
5a3f4986939612f2338c67c6bff253a5b56f25d94ded8b86b4936e9bc0b9c7eb
-
SHA512
513ade5dcd5b5e11360dbec98a7e5d6b28fd8bdcedabee7769861b818245e03b922dc2868fbaf61987d934464612867509c5808a86a15391f06783215d61a695
-
SSDEEP
24576:oLzCzHKDksR/LOyGcVybMsXxYc9uEUh7lkCWOkWor86b+7Q+9o8W48BfV8HwYSO:oLuTCks0yPKBP9u1JkCUWor8K+7Vs8HL
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 877ff5f9b6e0f396a4334cc896bcd2f4_JaffaCakes118
Files
-
877ff5f9b6e0f396a4334cc896bcd2f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE