Behavioral task
behavioral1
Sample
a9c12283bf4d26f498897dd309f81ef7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a9c12283bf4d26f498897dd309f81ef7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a9c12283bf4d26f498897dd309f81ef7_JaffaCakes118
-
Size
7.0MB
-
MD5
a9c12283bf4d26f498897dd309f81ef7
-
SHA1
2b6069e1a9bea485d7ff430c68971493c70a28a5
-
SHA256
ddb9a5328a01abde857cdf76a175061d2ff0291845fd71dafb2d05f5d7711624
-
SHA512
d34714b4d4e2ff45734e4630ed74e392add721aa833c70834098d725b615a41596eeeb0d3b8c25a2c38fb1095e4cfe307ba66052c2db3ff238c511eee6ab5a24
-
SSDEEP
196608:D5uMsLULvRIfw5MK/rNjeArEv6EPROcYQD/U:nsUAw+KZ6EjEpOcl8
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9c12283bf4d26f498897dd309f81ef7_JaffaCakes118
Files
-
a9c12283bf4d26f498897dd309f81ef7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.3MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.4MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE