Behavioral task
behavioral1
Sample
94fa3e269aa77a2613d1e307aa4e7d76_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
94fa3e269aa77a2613d1e307aa4e7d76_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94fa3e269aa77a2613d1e307aa4e7d76_JaffaCakes118
-
Size
3.1MB
-
MD5
94fa3e269aa77a2613d1e307aa4e7d76
-
SHA1
4bbdcae55a4be2a9a1b7863dc791e38bf2cc5201
-
SHA256
d6d9d909ab17bb7a35f28ccb17358ffecb53616b9be52c5e375062fde68288ae
-
SHA512
1094e4b4d0496bdedd314568fc7d525bd4fc83b8d75002d02eae4faabeda6d8aefdc4138d62a790bb13a92b52c1116898561efbf8fd7c0c05dec4d7ce4f2e4f2
-
SSDEEP
98304:pP3r2xsFo2Vzywcrvd9scemhG3w2K+X6O:h6gpEvT/emX2KFO
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94fa3e269aa77a2613d1e307aa4e7d76_JaffaCakes118
Files
-
94fa3e269aa77a2613d1e307aa4e7d76_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 582KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE