Behavioral task
behavioral1
Sample
ce783a6efe50470e96833c8bd01e8738_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce783a6efe50470e96833c8bd01e8738_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce783a6efe50470e96833c8bd01e8738_JaffaCakes118
-
Size
97KB
-
MD5
ce783a6efe50470e96833c8bd01e8738
-
SHA1
a137d6331da03add664deb5ac12579f2298115d3
-
SHA256
17e41e2899fbb8d8cbf10fc4b08ad373c87269ab60d2db0cade3930c370a2719
-
SHA512
a39cb027ecbb4895b081118c14685a406e93c8bf59552e7d7993d4692c27bf8e90f8f626b333c335e906eef2fb59f8e14799489a36e930378455af7cda26f130
-
SSDEEP
1536:OUzJEBV4XiOj1BUVzuU39ZA9aGyPjUAsmzPaxN1GIAsjrvL0JAO2M3J3:OUQ41cFTGyPjtupAsj8vF3J3
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce783a6efe50470e96833c8bd01e8738_JaffaCakes118
Files
-
ce783a6efe50470e96833c8bd01e8738_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 43KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 835KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE