Behavioral task
behavioral1
Sample
aedf588af37ad520fc85a6123e9b4a24_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aedf588af37ad520fc85a6123e9b4a24_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aedf588af37ad520fc85a6123e9b4a24_JaffaCakes118
-
Size
1.2MB
-
MD5
aedf588af37ad520fc85a6123e9b4a24
-
SHA1
03b580e4781c140641050a6ae0bc1b4c782d3d25
-
SHA256
24114233b789686bca293ef19a649de4d34bc0648256002f28e7b6600ba2638f
-
SHA512
33783650bf2b8206692e925f9aecb53775618548c819d9c99714cb720b45827909f1f8dfdb076c5b39edda05e7cd30eee033c888cbe21709e7dc1bab3741750f
-
SSDEEP
24576:RjuEQgHg9cBCxuOEtfzvP0WlziN1DSLuQcNlFtLIi6YzjEJgFZKxVGr6nBqc7Nr:RjuEQCS6tfr1lmN0LT8Dt8i6ijo9JBZ7
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aedf588af37ad520fc85a6123e9b4a24_JaffaCakes118
Files
-
aedf588af37ad520fc85a6123e9b4a24_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE