Behavioral task
behavioral1
Sample
ae7fcbbec543869296a9e0819a6def82_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ae7fcbbec543869296a9e0819a6def82_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae7fcbbec543869296a9e0819a6def82_JaffaCakes118
-
Size
1.1MB
-
MD5
ae7fcbbec543869296a9e0819a6def82
-
SHA1
7698b86400fcb195d4fd409b7a5849d2ae5efb86
-
SHA256
a5e87a79c9e73e25d78cc841f2fd0eeefde49ea2ba635f11dea2ebf9b007cbd2
-
SHA512
5ea72d2172912742c39adf7a63e8ffdbf266e5c791bc1d5ef3cb4330dd9ab323ceac043e8bb19a284e01297b89b65d02f4c8b833bad9cc2be0e086c73fe338f5
-
SSDEEP
24576:nraw6cHBQiTnAuHDX+WH2FpjS3YYo94+p8IfH5TOTaOmc+:nraw6cRn1jOtjioFNZHOmd
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae7fcbbec543869296a9e0819a6def82_JaffaCakes118
Files
-
ae7fcbbec543869296a9e0819a6def82_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE