Behavioral task
behavioral1
Sample
bf25213cd1a31b0c1fa794b8752d42dd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bf25213cd1a31b0c1fa794b8752d42dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf25213cd1a31b0c1fa794b8752d42dd_JaffaCakes118
-
Size
97KB
-
MD5
bf25213cd1a31b0c1fa794b8752d42dd
-
SHA1
a6322edc37ba6047b39314b4834ab7f5da9ffbad
-
SHA256
7c362341aa47ff7c96fea05fda89f14f17dbf3f0d18a9bff921288dedf59509c
-
SHA512
52e76d7942ada4c92b0329fdae3a148260dfb6a255ef112fde117f859076c1d010ff5481626a011fb46f649bc840266642a5ebab6be0d49ae62f0a1f0acda282
-
SSDEEP
3072:4Bo24jYm+SyYQiJlJgKEId4wVDqA3gUI7PKV+Cycz3U6A4pO2j:x7j7+S/JbgKEcDqA3gUI7PI+CN7CGOa
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf25213cd1a31b0c1fa794b8752d42dd_JaffaCakes118
Files
-
bf25213cd1a31b0c1fa794b8752d42dd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 167KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 939KB - Virtual size: 939KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE