Behavioral task
behavioral1
Sample
bfff7c425ee58edf8b2fbf90aff53f55_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bfff7c425ee58edf8b2fbf90aff53f55_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfff7c425ee58edf8b2fbf90aff53f55_JaffaCakes118
-
Size
743KB
-
MD5
bfff7c425ee58edf8b2fbf90aff53f55
-
SHA1
f4f243b1d8c9ea42aecc2dae50208c891a8733d6
-
SHA256
a4a724bf121931ee27a7d29a2a106cec31eb2caf0bf11d59566fc266bc872c16
-
SHA512
9cfe36f65312869a05680eb546db1669928d3df82355db533f6bdd2966fd3053eb4454a3572c665c5f26445c0909427c2fb9d0336d4277759fedd32592a17dc0
-
SSDEEP
12288:CBYrWX3BjT2hJpIp/3B3VnA7lCEUNbyf18j4Aa2tY0wfznmb98Mktg/l0wH+vO:4mWX30v+pV1A7MNNU3GY0wfzny98/G/D
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfff7c425ee58edf8b2fbf90aff53f55_JaffaCakes118
Files
-
bfff7c425ee58edf8b2fbf90aff53f55_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE