Behavioral task
behavioral1
Sample
beb0d430ed13c3cdd5119ea3ba3e832e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
beb0d430ed13c3cdd5119ea3ba3e832e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
beb0d430ed13c3cdd5119ea3ba3e832e_JaffaCakes118
-
Size
4.1MB
-
MD5
beb0d430ed13c3cdd5119ea3ba3e832e
-
SHA1
eeec5a7f9ff641f8c3cd4d50b8df72bec3af7411
-
SHA256
fd765eaa2cacc2c0ac133f6bb38508ac33bed51ac217057bcae84408d36832bd
-
SHA512
df94e49fbf1347af33ec31eeeca9876a094f88b6ca9aad79f6de5088848ba566d83b5e2190f2df829a76599b8522c2622cbfff21055d66f396a015c8fcd78d90
-
SSDEEP
98304:q+wJpo5P59occJ9iSlHvnhTvaIgGyI96:q+8o6cAcuvn1g9
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource beb0d430ed13c3cdd5119ea3ba3e832e_JaffaCakes118
Files
-
beb0d430ed13c3cdd5119ea3ba3e832e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 724KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE