Behavioral task
behavioral1
Sample
d2d6aec83ad4f85a9e6350a82f79abab_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2d6aec83ad4f85a9e6350a82f79abab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2d6aec83ad4f85a9e6350a82f79abab_JaffaCakes118
-
Size
1.2MB
-
MD5
d2d6aec83ad4f85a9e6350a82f79abab
-
SHA1
21b3fe0cbf5f9bea952595d1cfda8bfa01c3f4d5
-
SHA256
52c1e104b7d57d75ac1a82fb04f414e5bc2cacca61f9ce56ff2b6907a0705ed9
-
SHA512
699ab50c1c19912f24fa5eea058f65a85195f22c7a9373ce7db4038d765bfde49a2f39470d4766e95000786dda18a4e0960828aacf4fe34063e4addd5dff9be6
-
SSDEEP
24576:As5mzXy4t5n9F2/1dGM9t2ldUSbM8PlneCqO5IUWmSlOcufwEPgNl:dIjZ9w/f2js8N8xmAjufwOm
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2d6aec83ad4f85a9e6350a82f79abab_JaffaCakes118
Files
-
d2d6aec83ad4f85a9e6350a82f79abab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE