Behavioral task
behavioral1
Sample
a55b401da9aabe64ccb1e5de3ebd6b65_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a55b401da9aabe64ccb1e5de3ebd6b65_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a55b401da9aabe64ccb1e5de3ebd6b65_JaffaCakes118
-
Size
1.3MB
-
MD5
a55b401da9aabe64ccb1e5de3ebd6b65
-
SHA1
b966b9779fec6a44f5fa0622d2c1fb3a0e11fc8f
-
SHA256
3f0d1e8103f88e6c3788dddbfcd761fb86f249940f5459b02cdd3fc4099199dd
-
SHA512
cca06efd10b1a4fa20dd6163520419fd1ff50c46d42f8423b20bef32c5d4f79168a4bfddd8397c9f2d4371487713d03245ef60a42a9f9b97d232a3cbf7dbd885
-
SSDEEP
24576:FMzl3790fbj5jIYyg//b3vipfTkJDu3/iP5O6ul5:F8790fbj4oKf9w5E
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a55b401da9aabe64ccb1e5de3ebd6b65_JaffaCakes118
Files
-
a55b401da9aabe64ccb1e5de3ebd6b65_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE