Behavioral task
behavioral1
Sample
b7dcaae66e1fa27c36a67f13ceb46c31_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b7dcaae66e1fa27c36a67f13ceb46c31_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7dcaae66e1fa27c36a67f13ceb46c31_JaffaCakes118
-
Size
1.2MB
-
MD5
b7dcaae66e1fa27c36a67f13ceb46c31
-
SHA1
d9bd22af663cd3cb74b326929a252145be500bf1
-
SHA256
6b785f0ab2c48cb6eb493af1bafc9304137a64cd3ac7dfe132131817eea6a0d8
-
SHA512
22f89727e31005f2f6df9b471c2e6518bba307141cf400d16552912362b31590c64a74e96d3e5978bc8ae970906b78221606ae9f76effc7256edba59ff88b726
-
SSDEEP
24576:6SeEGUgKfjI4LiVDBN9vT4zrgOu8Tg2eCW3wJXkckkWhbOAn:AG7Ik6J7UcOu+beCW3YXNkx
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7dcaae66e1fa27c36a67f13ceb46c31_JaffaCakes118
Files
-
b7dcaae66e1fa27c36a67f13ceb46c31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE