Behavioral task
behavioral1
Sample
a29320cdaeef935cf366261a170c1e88_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a29320cdaeef935cf366261a170c1e88_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a29320cdaeef935cf366261a170c1e88_JaffaCakes118
-
Size
752KB
-
MD5
a29320cdaeef935cf366261a170c1e88
-
SHA1
5f0e6c19dfe22e4a41055f8ab4dac1427074e88e
-
SHA256
ac308a3145a7148f4e84e5baac10f4fcfd2708eac9cd3a87d3a5f3948b77e86f
-
SHA512
df2c55b608c63b9391379b1bad31f14350674d2c5fc179679d5e3018839ffb9ef92d86fe9619d3ffcb9b9f13b796808c781da9fd611563c89826023c12275497
-
SSDEEP
12288:mDXdRkDuXb5IIhx43adybYaNNZQXk+aiptW5v9edN1gFAbdYHUKi5EiEUUh6vql:mrHk6XVXxm0GvX+qI+HnirE9h4E
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a29320cdaeef935cf366261a170c1e88_JaffaCakes118
Files
-
a29320cdaeef935cf366261a170c1e88_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 113KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 333KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE