Behavioral task
behavioral1
Sample
abf9329a9ae13c2878154bd81f9f3eb0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
abf9329a9ae13c2878154bd81f9f3eb0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abf9329a9ae13c2878154bd81f9f3eb0_JaffaCakes118
-
Size
2.1MB
-
MD5
abf9329a9ae13c2878154bd81f9f3eb0
-
SHA1
dff1c4a6664eee399db2ef9c8b152acfe90e58c1
-
SHA256
2edc060ddf193202713ee3d7d1deb1f16ae7003e15ca0cd1ab55babd93e6cce9
-
SHA512
3fcab406edaed467f2a4c3406fc5bc90adbec99ad57ea8188582d0b113616d3380a83a4b56a8f4155d683b6129931e402b9dc56f2988e0eaa166ef32c2aa6e69
-
SSDEEP
49152:lfFm3mDBnLmU5uz9ItAIO59SOMdiUhE+QC:Dm2LmUgzitvGQ0DC
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abf9329a9ae13c2878154bd81f9f3eb0_JaffaCakes118
Files
-
abf9329a9ae13c2878154bd81f9f3eb0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 280KB - Virtual size: 280KB
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE