Behavioral task
behavioral1
Sample
c15572d83bfc3353054bf6459305f918_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c15572d83bfc3353054bf6459305f918_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c15572d83bfc3353054bf6459305f918_JaffaCakes118
-
Size
2.5MB
-
MD5
c15572d83bfc3353054bf6459305f918
-
SHA1
e242693932bb0b1c6732d966e612ffd5e5719c21
-
SHA256
0aa815716cf18e8ae81b48032bf9b2c8ae907b91dab9cc9c9b609ce417df4780
-
SHA512
6ccccdf0cdd2880f15667597c3396d40c9075191baab926f791932c1d5748a418dae16db3f36a518cc05492dea6c6e35ba55a429d38df4dae117a9f43374ae09
-
SSDEEP
24576:Ym1rEeW308HEZ3CFen3P09Y5W4TSkh5yJQwpl0m+2RncgrbJ2rQlxD8g1TSte86Q:5eEYcn/4YpTPyjg9+nFquc6py5XhlVeW
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c15572d83bfc3353054bf6459305f918_JaffaCakes118
Files
-
c15572d83bfc3353054bf6459305f918_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 138KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 2.3MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE