Behavioral task
behavioral1
Sample
b04a891175813c8b5d6055e02ef2f716_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b04a891175813c8b5d6055e02ef2f716_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b04a891175813c8b5d6055e02ef2f716_JaffaCakes118
-
Size
1.4MB
-
MD5
b04a891175813c8b5d6055e02ef2f716
-
SHA1
3b9d8919fc1f7ed52c2a71b03a7636c1a67b3368
-
SHA256
71580874ef276ce3d74ece0a1432894e3d528979a3130b6665573e522b03eed4
-
SHA512
16a0cd25b9db47372f9edd8075713c581fb3d2ff3ec1c2f67394978699d98e2782f3130d962ad9e2d9bc958d06bb84fe7076898a89c14473a569287490c52a46
-
SSDEEP
24576:ruM69+w6W/w8gNMQ/t88vYb6iM/AMFONYgjKI7zCFI2C5geo49138+3kpuAQRqRS:rm8rW/HgaNyGM/AMFoYlI7zK8A4jKFMS
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b04a891175813c8b5d6055e02ef2f716_JaffaCakes118
Files
-
b04a891175813c8b5d6055e02ef2f716_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 225KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE