Behavioral task
behavioral1
Sample
b6728395f0f6b6a46e95b1791b7ee663_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b6728395f0f6b6a46e95b1791b7ee663_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6728395f0f6b6a46e95b1791b7ee663_JaffaCakes118
-
Size
181KB
-
MD5
b6728395f0f6b6a46e95b1791b7ee663
-
SHA1
6e44e32f0e6362a83d76ada7629d3f44fcd9c24a
-
SHA256
3b476e7d68824922858a50a4d9d5b9f468146aa3f925fd3e9569a299a3a595c4
-
SHA512
8359138cf10cdffce92f12cf6d63e44487b1b06146759011cf02da77d803e356908cf767fb192874e6a521d1c5abdda04d0bf1da3b5f36f3c85eaca7a04a94c2
-
SSDEEP
3072:CtV1yTHv3W5hPSxe3sScMj4FHVyoS6dXlhUN6cz4YJUe3ykscA6Xz4Xu8W7:CtW7v3w0EcM0FHVyp6dlhU/Jckf0Xu82
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6728395f0f6b6a46e95b1791b7ee663_JaffaCakes118
Files
-
b6728395f0f6b6a46e95b1791b7ee663_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 365KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.0MB - Virtual size: 19.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 944KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE