Behavioral task
behavioral1
Sample
cfa17597bf5ffada2ce67214e9570588_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfa17597bf5ffada2ce67214e9570588_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfa17597bf5ffada2ce67214e9570588_JaffaCakes118
-
Size
76KB
-
MD5
cfa17597bf5ffada2ce67214e9570588
-
SHA1
fca4e97b3edf1d57cb4ebd72112771bc6aa6fce0
-
SHA256
91c9c5665ba92b06093d86deec16dfa2b699087c3de020049aef76165f7d4821
-
SHA512
09293bb560690b668630a8d7789b1f3c00efbde7adf3b865bfbecd3f8a4db3c4d99a643afbfd5002baa9314cd2a4b5cd47704f54ae9a1fb0433d00f36205d1c9
-
SSDEEP
1536:LeiuTlJkvAMlQhwD/NSO1x24eoyTqYQjM/3NIebg:K/TlJgQhbaxBeoyV13uec
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfa17597bf5ffada2ce67214e9570588_JaffaCakes118
Files
-
cfa17597bf5ffada2ce67214e9570588_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 35KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 343KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE