Behavioral task
behavioral1
Sample
a416e2b94bc38bc536a72b5767ef4ab1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a416e2b94bc38bc536a72b5767ef4ab1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a416e2b94bc38bc536a72b5767ef4ab1_JaffaCakes118
-
Size
5.0MB
-
MD5
a416e2b94bc38bc536a72b5767ef4ab1
-
SHA1
5d87d026539d17c96cea593b650dae5444cee235
-
SHA256
c0b02e43ba3e312133a931a1f9f16c9156a76e8e6a5bab88bb06c6f521368e9c
-
SHA512
027dde63f3bfd4fce21f4b4a8648e017208d1d9a871254c3cf159d0211a427d87829d1c488d1d2bd2a4dddf0d2ac9594e07b0d7a29d9049ba542282d67c10ebf
-
SSDEEP
98304:ns9jV0C+gMrpOb2TLfqFFknFBo368/VYrgXYZB5PV9I0lPgnXJL7F5GtX:CV0C+gMMb2SFknf868tEZLV3+XJLm
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a416e2b94bc38bc536a72b5767ef4ab1_JaffaCakes118
Files
-
a416e2b94bc38bc536a72b5767ef4ab1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 439KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.4MB - Virtual size: 9.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE