Behavioral task
behavioral1
Sample
aac261bd0312cbb1d7c56f3a3b57fff4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aac261bd0312cbb1d7c56f3a3b57fff4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aac261bd0312cbb1d7c56f3a3b57fff4_JaffaCakes118
-
Size
1.2MB
-
MD5
aac261bd0312cbb1d7c56f3a3b57fff4
-
SHA1
34029595dfbc09a2543f6f0a9bd3ee37cc96845e
-
SHA256
5e74bee5307b0982c89ed4b72aa4d824ee60d5537894dd69d836f498981721be
-
SHA512
e6b4f1df126f80aad5d849312d039b9c30bf56290da7a9827376336ae28a108220d1aebaa19adb038ac0e313e3ef0a2274163dc3a731cf9921c205c28d49efa8
-
SSDEEP
24576:kHTs56RvCFvDQE20i+rSOBoDZxbbp5wA8jwqd3fz:iTs5CvCVkXgBuRp5wAE75z
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aac261bd0312cbb1d7c56f3a3b57fff4_JaffaCakes118
Files
-
aac261bd0312cbb1d7c56f3a3b57fff4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE