Behavioral task
behavioral1
Sample
bd3aca9bfc18b0c99e4b130e3859e353_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd3aca9bfc18b0c99e4b130e3859e353_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd3aca9bfc18b0c99e4b130e3859e353_JaffaCakes118
-
Size
799KB
-
MD5
bd3aca9bfc18b0c99e4b130e3859e353
-
SHA1
7e331d61019839d17232aa6fbb65f7685d93c2fc
-
SHA256
dcbc1038c63d6dece4e983346842f95e568bd1b41be7fbfbd9d2dd97d5731cc5
-
SHA512
a5f2348772eff9ec9c57077d0531b72ecc571fdd6258fb1aa5f2b5b8f9ce518002ade3e0199a7d454958e9e611d932c5e8f24bf808bcd342ce0fc8a974579406
-
SSDEEP
24576:oQunI5qdM+cyazwFqXaOTo98ZHJ6XvvB4j:onIwZizoqXTk40XBC
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd3aca9bfc18b0c99e4b130e3859e353_JaffaCakes118
Files
-
bd3aca9bfc18b0c99e4b130e3859e353_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 276KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 494KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE