Behavioral task
behavioral1
Sample
d157334abc12e83e5ba9f36b9b89c6cd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d157334abc12e83e5ba9f36b9b89c6cd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d157334abc12e83e5ba9f36b9b89c6cd_JaffaCakes118
-
Size
5.0MB
-
MD5
d157334abc12e83e5ba9f36b9b89c6cd
-
SHA1
a8a6126d6380008c29f51b9254f625be9b2684cc
-
SHA256
ad3b9912a3bf9c657e16ea2488c2bb054119e7d9ab9531172d9ed6ee83ae96dd
-
SHA512
79604133b25197b57db135141629a301ae8b624e6f604891dfd67d4fd77a986b56db3ed72e045b0d6ed5d09fca03fadb2395f673c8f86be7080297bd2e8a620e
-
SSDEEP
98304:EaEBeZ7vD0yYbtRqOqtgoymPPY7W+vHyRyJLCnG7RTeRpbdepW8:aBeN0yYbq1tgoZPP6PvHyRURiXdep
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d157334abc12e83e5ba9f36b9b89c6cd_JaffaCakes118
Files
-
d157334abc12e83e5ba9f36b9b89c6cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 514KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.4MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE