Behavioral task
behavioral1
Sample
88dabfd6b5b81910159f2ed35b32b27f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
88dabfd6b5b81910159f2ed35b32b27f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88dabfd6b5b81910159f2ed35b32b27f_JaffaCakes118
-
Size
1.3MB
-
MD5
88dabfd6b5b81910159f2ed35b32b27f
-
SHA1
10e2adc30dbabc25fccdf2a8e0011ac24e1eb5b1
-
SHA256
128166cda04d396e60917f726046ff334ab51ba4c558a9bac78afcf1dd3b38be
-
SHA512
f25dcf18852565fa45b40604b6c3db62479c8a030917d411230c29d59d68fb2f2e6fc469d2b7d0415c19d40c8b9d301451e35c16ed5976c4e57837d7befec855
-
SSDEEP
24576:rvjlNeMYPQoz+oQr9kQ3OKiX3exw1hlILDcc5SahvLBLL5Oc:TbPYPQoqoM9kJsbLwyhzBLL5O
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88dabfd6b5b81910159f2ed35b32b27f_JaffaCakes118
Files
-
88dabfd6b5b81910159f2ed35b32b27f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE