Behavioral task
behavioral1
Sample
bde8461dab77fc8fc5727aa9435a986c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bde8461dab77fc8fc5727aa9435a986c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bde8461dab77fc8fc5727aa9435a986c_JaffaCakes118
-
Size
505KB
-
MD5
bde8461dab77fc8fc5727aa9435a986c
-
SHA1
2d84dcb21b757b0295a54f5360a73e5eb4cbb3b9
-
SHA256
005b207cc6ab0ec674dd939928998b1ab7dc64d68bd8287a250a83c59c3822d5
-
SHA512
d9c7b803fe8e713046dafaf7822e91cc5e3ebb255a7b77ccdae04c3821534d69d9e8bec3150f11784b9be4b6663c9df0b6c9b9e55a90be3d6aaada5996829b81
-
SSDEEP
12288:aB/eHxF7z3QYEVut0uRDJYea2eUSBTD7fWotEIQB+IKi8hKkRnY:qmRRz3Q5YiuEeuUs3EIKKi8jRnY
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bde8461dab77fc8fc5727aa9435a986c_JaffaCakes118
Files
-
bde8461dab77fc8fc5727aa9435a986c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 112KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 371KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE