Behavioral task
behavioral1
Sample
a01b3989b9bc47ff3334874c04912d71_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a01b3989b9bc47ff3334874c04912d71_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a01b3989b9bc47ff3334874c04912d71_JaffaCakes118
-
Size
548KB
-
MD5
a01b3989b9bc47ff3334874c04912d71
-
SHA1
bd83cae40917e6b39d011e291b6c25a5cf469adf
-
SHA256
b147388eb5f1710c9379128ec5ca528441356991a1ed0e3d6e5fa11461d0c5ed
-
SHA512
f4500d26f4bc2b4c6defbaeea82f83d6d9ce1ec4a510661a567cf08988ca09723ef1e0a8dc4578050de96493b1e28cfb1d0a4e2479fefad46f7ab1ca9cfabb20
-
SSDEEP
12288:db0U8iGSTpDdToOe/Feps00xjITqUa7lSgHX2SEbe:db0U8iLDYFtIWJUgQbe
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a01b3989b9bc47ff3334874c04912d71_JaffaCakes118
Files
-
a01b3989b9bc47ff3334874c04912d71_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 394KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE