Behavioral task
behavioral1
Sample
9547326d59e7c56b3bbe5efe40a1e5f5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9547326d59e7c56b3bbe5efe40a1e5f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9547326d59e7c56b3bbe5efe40a1e5f5_JaffaCakes118
-
Size
676KB
-
MD5
9547326d59e7c56b3bbe5efe40a1e5f5
-
SHA1
7600d940fc5ff7d1f3cd9f19d8786e0c18204810
-
SHA256
7c9d1e06fe91bdae1389ca0d5ffb988ae4b5787bb11dd26f4fdc778d2fa28c5d
-
SHA512
37afafb20a26e185e0888ce6a07eb5f1409abd1905c6a02df8423bf83cce63ce61b6c994b3601a73fd5849c50d58ab2fe623d066b85366b81a10f75ec7d132db
-
SSDEEP
12288:LvJq1XHTQdYqty90MtfNFNS5xqakf+AX+B+BxhXsGKYpTYaR2SYW4WW:Lm3Mi90MV/S5EaroBLQSYW4WW
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9547326d59e7c56b3bbe5efe40a1e5f5_JaffaCakes118
Files
-
9547326d59e7c56b3bbe5efe40a1e5f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 216KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 440KB - Virtual size: 1024KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE