Behavioral task
behavioral1
Sample
8b1a313fb15d39032169567d9b14ada2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b1a313fb15d39032169567d9b14ada2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b1a313fb15d39032169567d9b14ada2_JaffaCakes118
-
Size
203KB
-
MD5
8b1a313fb15d39032169567d9b14ada2
-
SHA1
ddfaa469925f4e70a3993f681a57b4041d0beb4d
-
SHA256
d53c3503c478d809c5b4a87c402f4e15b6489be03bc0fdcf6a0aafb806305dd9
-
SHA512
fc9974b461eed86429f3e35b9b0916328ba7cfc03aea9168b1e043459a82db7fcb58f010536884a7a0e53d30823f48ff2a5cb866d6edeeb1287f22bc7f11ef85
-
SSDEEP
6144:+ee3yGNualKJiiexkf+J8i8IpApNylwsi2ii:9eC7BKIq/vpA+esi2R
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b1a313fb15d39032169567d9b14ada2_JaffaCakes118
Files
-
8b1a313fb15d39032169567d9b14ada2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 472KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 13.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 972KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE