Behavioral task
behavioral1
Sample
b476cd96777247ce39ab521d009c3465_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b476cd96777247ce39ab521d009c3465_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b476cd96777247ce39ab521d009c3465_JaffaCakes118
-
Size
1.5MB
-
MD5
b476cd96777247ce39ab521d009c3465
-
SHA1
7f34f848cc1641580e5e1d4e758dc436157191ea
-
SHA256
1db1d962480e0a3bfd9e9ed92b79e35a7bab38a016cf96a31919bdb2271fbe1f
-
SHA512
d19ffba05ec73ba470ed04bee8ea1705592855c242240b6304a4c5edd63c728adb168e520de6ce2030b973de435ccd8be0ccba11bb08bf664f356070ba1f581b
-
SSDEEP
24576:cYOj+PQg1s9YvEykFW2MkoA90Klp9hWbFwAqXuftRc7x452cT/7c8i:exg+9YcykFNMOqwug7x452cT/
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b476cd96777247ce39ab521d009c3465_JaffaCakes118
Files
-
b476cd96777247ce39ab521d009c3465_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE