Behavioral task
behavioral1
Sample
bcf7023e08cc2dc1fe8c79dbc47aa41b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bcf7023e08cc2dc1fe8c79dbc47aa41b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcf7023e08cc2dc1fe8c79dbc47aa41b_JaffaCakes118
-
Size
587KB
-
MD5
bcf7023e08cc2dc1fe8c79dbc47aa41b
-
SHA1
621260b8e8b1072ed2c5663a7acb85b913c264fc
-
SHA256
030cbbc94554c18af89fe2aff7e4e655e58f2c0d7e5d6401d75150340bae5d23
-
SHA512
2a95d1b97408413325aff2b200ea43e1468373dd9a8d07c51d479f168aeac48d3eb51b5d479f800f8a20bd95c97d3f7d3214b4df3476f196db398ce68e38e251
-
SSDEEP
12288:73uZRhk3RAHMDDm64Pd9dHZ+xffk1qZrvlwkOlhHzIjs6BX+HEI:TuZR6qHOa64PHdHZ+x3k4Z4zrsX+H
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcf7023e08cc2dc1fe8c79dbc47aa41b_JaffaCakes118
Files
-
bcf7023e08cc2dc1fe8c79dbc47aa41b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 129KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 449KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE