Behavioral task
behavioral1
Sample
b59c3d0c7dcd392103655868043ad05d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b59c3d0c7dcd392103655868043ad05d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b59c3d0c7dcd392103655868043ad05d_JaffaCakes118
-
Size
869KB
-
MD5
b59c3d0c7dcd392103655868043ad05d
-
SHA1
78d7a58a3dced334e1cd6baefcaf0b0c81024ba3
-
SHA256
6d366259f4dfbe25c9949805cfd234f2be5f826f3f826a4df298d9f8fdb17727
-
SHA512
7ae0f9bfc8733698bb98189cc4b37b2dbfb64611d5bc9c6b0451c3858f13f8e7d8271e941925e6969c121e89a977fdfd77fdf7ae70f81c66802d20526fe2b881
-
SSDEEP
24576:O3OpKVptCXoyaKOmWEZwafIRPgxS9RjK3T:IOpKbtCYyXOTE7SPgxpD
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b59c3d0c7dcd392103655868043ad05d_JaffaCakes118
Files
-
b59c3d0c7dcd392103655868043ad05d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 287KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE