Behavioral task
behavioral1
Sample
c27a5f595c6a6324a3982b567efd6e2a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c27a5f595c6a6324a3982b567efd6e2a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c27a5f595c6a6324a3982b567efd6e2a_JaffaCakes118
-
Size
152KB
-
MD5
c27a5f595c6a6324a3982b567efd6e2a
-
SHA1
29f7b33ae04e81b7a64a26d8c3793dee17da26be
-
SHA256
5ae05ebf3451638b7373379ba99b3f7096ea63f16fc1739b9240bd1325ebc68d
-
SHA512
7e1f09bc25ac389fb7a763e61bb1e8a3094e32ecbd55992c9578b8e447e42ed6f740acae32e4421200e8296c809c27be8f6dcfb9e5c2f82f0be3c7d20725222b
-
SSDEEP
3072:X+wkRucF6KJT8L2RFFgRMxrIbRIq3eB7O8DJCJ84oNTF:OTt6KB8L2fORYIaqoDkJ8pNh
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c27a5f595c6a6324a3982b567efd6e2a_JaffaCakes118
Files
-
c27a5f595c6a6324a3982b567efd6e2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 92KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 936KB - Virtual size: 956KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE