Behavioral task
behavioral1
Sample
bf0e6a34d6f7c0ada9c6ae9499c77f67_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bf0e6a34d6f7c0ada9c6ae9499c77f67_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf0e6a34d6f7c0ada9c6ae9499c77f67_JaffaCakes118
-
Size
983KB
-
MD5
bf0e6a34d6f7c0ada9c6ae9499c77f67
-
SHA1
0c9614db0deb45aee3e59963f420ec03a377359d
-
SHA256
e0df3d9f759bd36c907d669e129deddc4e8b8fe6ab5b98198a9326e6d99b19af
-
SHA512
0ce2ddee31707c30d979f48e3d433a4e98976d1adb1331509420b9513c77b8fa6e6c93de672fc24cf74a441b8d80b223cd21c32638b85c2b2e7bb5b5c4a8663d
-
SSDEEP
24576:PSKZg67Pc6ns37rKrrr+1+dVijX9Wc8cxm1DQdgphfYVtFr9T2lNm:PSKZLcx3Gri1+ynUlQOTWtFrgm
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf0e6a34d6f7c0ada9c6ae9499c77f67_JaffaCakes118
Files
-
bf0e6a34d6f7c0ada9c6ae9499c77f67_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 186KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 782KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE