Behavioral task
behavioral1
Sample
948b213f4878053bbcb2577284291f7d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
948b213f4878053bbcb2577284291f7d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
948b213f4878053bbcb2577284291f7d_JaffaCakes118
-
Size
2.4MB
-
MD5
948b213f4878053bbcb2577284291f7d
-
SHA1
30b3a62f2e7ebbf332df807253405044373485f0
-
SHA256
d363908d289dfdbf0d8de58929261050c937adf5cb739f9d5ae0b82441173742
-
SHA512
2d92f169970a77e0e6954b4a034dd8e77ddbce02461f67b8d141ca23f6b5da61ddd5b4058ee9e58d1c6aa51f32f1beab9ee53622f6fb29bc05fe7d96448ed3c8
-
SSDEEP
49152:wUAwYKVERX7ztcH53x/0qYhMFQ+OpFzDYXfI/cTftUeZp8:7lm9lwl0nFfciYj
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 948b213f4878053bbcb2577284291f7d_JaffaCakes118
Files
-
948b213f4878053bbcb2577284291f7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xLuOpPx Size: 1.2MB - Virtual size: 4KB
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE