Behavioral task
behavioral1
Sample
c16580af2614b4ce827b7ffa7d271822_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c16580af2614b4ce827b7ffa7d271822_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c16580af2614b4ce827b7ffa7d271822_JaffaCakes118
-
Size
1.1MB
-
MD5
c16580af2614b4ce827b7ffa7d271822
-
SHA1
93582a27f9e02e818aec400068dfe54a85d237a5
-
SHA256
99dd3d8f1268c7f2aa1a44cf5c4ab94bc631bd5c13c37ac80c5246c4e06b05e1
-
SHA512
f59f46d57955e7fcc54f74cad1e52da795297dd352e811b74ae79994d1282740f973ca7d15d2e30e22e37a4a2ecde918a8cb4e48c9be28926331c2f877470182
-
SSDEEP
24576:v2esAM9ER/OxlRWVmkmtSo2t8vtuxrqwhNqQPfJ9BtnKCsCgRcspP:vCAMq25WVmk4eS4DodP
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c16580af2614b4ce827b7ffa7d271822_JaffaCakes118
Files
-
c16580af2614b4ce827b7ffa7d271822_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 84KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 996KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE