Behavioral task
behavioral1
Sample
d1072ad7a6c99499ac4b3370dde084cc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1072ad7a6c99499ac4b3370dde084cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1072ad7a6c99499ac4b3370dde084cc_JaffaCakes118
-
Size
1.3MB
-
MD5
d1072ad7a6c99499ac4b3370dde084cc
-
SHA1
01afd5018d2f1aa0fab0f7c8de01ca52467370e8
-
SHA256
d65b5254de7d635d58f06bda99c3b27bfcf82328a5492b9086cf4f5cf92e277d
-
SHA512
56dabedd32fe8db975ca6d31c8aab7d830e03b10b16f627d5141f91f40758c8e4b7d0750a95ba0dc44e1cc79f5b3b091c19afc8a3141f95f2d22756fc8add66c
-
SSDEEP
24576:t2rG+Pj655PfgUryE1CP/uamsjsW32NrP4a6ri+rUpBtf99nnC+Y:tk/ezP5yEIHFD6rP4c+YBtf9zY
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1072ad7a6c99499ac4b3370dde084cc_JaffaCakes118
Files
-
d1072ad7a6c99499ac4b3370dde084cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE